ghcr.io/imagegenius/immich:3.2.0-noml linux/amd64

ghcr.io/imagegenius/immich:3.2.0-noml - Trivy安全扫描结果扫描时间: 2026-09-13 18:50

全部漏洞信息

低危漏洞:19

中危漏洞:137

高危漏洞:37

严重漏洞:2

系统OS: ubuntu 26.04 扫描引擎: Trivy 扫描时间: 2026-09-13 18:50

ghcr.io/imagegenius/immich:3.2.0-noml (ubuntu 26.04) (ubuntu)

低危漏洞:14

中危漏洞:117

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	漏洞信息
curl	CVE-2026-13608	中危	8.18.0-1ubuntu2.5	A flaw in the libcurl SASL negotiation for LDAP authentication allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
curl	CVE-2026-18924	中危	8.18.0-1ubuntu2.5	A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl	CVE-2026-19931	中危	8.18.0-1ubuntu2.5	A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl	CVE-2026-80229	中危	8.18.0-1ubuntu2.5	When performing transfers via libcurl\u2019s multi interface, pooled T ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
curl	CVE-2026-80230	中危	8.18.0-1ubuntu2.5	When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
curl	CVE-2026-80255	中危	8.18.0-1ubuntu2.5	A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
curl	CVE-2026-82209	中危	8.18.0-1ubuntu2.5	When libpsl support is enabled, libcurl fails to enforce the Public Su ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
jq	CVE-2026-41256	中危	1.8.1-4ubuntu2	jq: embedded NUL truncates top-level jq programs loaded with -f 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq	CVE-2026-41257	中危	1.8.1-4ubuntu2	jq: signed-int overflow in stack_reallocate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq	CVE-2026-43895	中危	1.8.1-4ubuntu2	jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq	CVE-2026-43896	中危	1.8.1-4ubuntu2	jq: stack overflow in recursive object merge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq	CVE-2026-44777	中危	1.8.1-4ubuntu2	jq: stack overflow in module loading on mutual include 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libc-bin	CVE-2026-18374	中危	2.43-2ubuntu2.4	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-gconv-modules-extra	CVE-2026-18374	中危	2.43-2ubuntu2.4	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6	CVE-2026-18374	中危	2.43-2ubuntu2.4	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libcurl4t64	CVE-2026-13608	中危	8.18.0-1ubuntu2.5	A flaw in the libcurl SASL negotiation for LDAP authentication allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
libcurl4t64	CVE-2026-18924	中危	8.18.0-1ubuntu2.5	A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64	CVE-2026-19931	中危	8.18.0-1ubuntu2.5	A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64	CVE-2026-80229	中危	8.18.0-1ubuntu2.5	When performing transfers via libcurl\u2019s multi interface, pooled T ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
libcurl4t64	CVE-2026-80230	中危	8.18.0-1ubuntu2.5	When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
libcurl4t64	CVE-2026-80255	中危	8.18.0-1ubuntu2.5	A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
libcurl4t64	CVE-2026-82209	中危	8.18.0-1ubuntu2.5	When libpsl support is enabled, libcurl fails to enforce the Public Su ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libde265-0	CVE-2024-38949	中危	1.0.16-1build1	Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38949 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2024-06-26 20:15 修改: 2026-06-17 07:41
libde265-0	CVE-2024-38950	中危	1.0.16-1build1	Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38950 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2024-06-26 20:15 修改: 2026-06-17 07:41
libde265-0	CVE-2026-33164	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33164 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-03-20 21:17 修改: 2026-06-17 10:37
libde265-0	CVE-2026-33165	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33165 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-03-20 21:17 修改: 2026-06-17 10:37
libde265-0	CVE-2026-45382	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45382 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-07-21 21:16 修改: 2026-07-23 18:18
libde265-0	CVE-2026-45383	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Ve ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45383 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-07-21 21:16 修改: 2026-07-23 18:18
libde265-0	CVE-2026-49295	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49295 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-19 21:17 修改: 2026-06-26 19:17
libde265-0	CVE-2026-49337	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49337 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-19 21:17 修改: 2026-06-23 15:44
libde265-0	CVE-2026-49346	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49346 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-19 21:17 修改: 2026-06-26 19:17
libde265-0	CVE-2026-54240	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Ve ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54240 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-09-11 22:16 修改: 2026-09-11 22:16
libde265-0	CVE-2026-54241	中危	1.0.16-1build1	libde265 is an open source implementation of the h.265 video codec. Ve ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54241 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-09-11 22:16 修改: 2026-09-11 22:16
libexpat1	CVE-2025-66382	中危	2.7.4-1	libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libexpat1	CVE-2026-32776	中危	2.7.4-1	libexpat: libexpat: Denial of Service due to NULL pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1	CVE-2026-32777	中危	2.7.4-1	libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1	CVE-2026-32778	中危	2.7.4-1	libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1	CVE-2026-41080	中危	2.7.4-1	libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libexpat1	CVE-2026-45186	中危	2.7.4-1	libexpat: denial of service via crafted XML input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
libexpat1	CVE-2026-50219	中危	2.7.4-1	expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1	CVE-2026-56131	中危	2.7.4-1	libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56132	中危	2.7.4-1	expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56403	中危	2.7.4-1	libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56404	中危	2.7.4-1	libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56405	中危	2.7.4-1	libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1	CVE-2026-56406	中危	2.7.4-1	libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1	CVE-2026-56407	中危	2.7.4-1	libexpat: libexpat: Arbitrary code execution due to integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1	CVE-2026-56408	中危	2.7.4-1	libexpat before 2.8.2 has an integer overflow in copyString. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat1	CVE-2026-56409	中危	2.7.4-1	xmlwf in libexpat before 2.8.2 has an integer overflow for the output ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1	CVE-2026-56410	中危	2.7.4-1	libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1	CVE-2026-56411	中危	2.7.4-1	expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1	CVE-2026-56412	中危	2.7.4-1	libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libexpat1	CVE-2026-66046	中危	2.7.4-1	Expat through 2.8.3 contains a denial of service vulnerability caused ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
libexpat1	CVE-2026-72522	中危	2.7.4-1	expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33
libexpat1	CVE-2026-76641	中危	2.7.4-1	CVE-2026-76641 affecting package expat for versions less than 2.8.3-2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
libexpat1	CVE-2026-76957	中危	2.7.4-1	libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
libglib2.0-0t64	CVE-2026-15588	中危	2.88.0-1	GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-07-20 12:17 修改: 2026-09-10 18:17
libglib2.0-0t64	CVE-2026-16118	中危	2.88.0-1	xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-07-17 20:17 修改: 2026-09-11 10:16
libglib2.0-0t64	CVE-2026-58010	中危	2.88.0-1	glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-0t64	CVE-2026-58011	中危	2.88.0-1	glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-0t64	CVE-2026-58012	中危	2.88.0-1	glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-0t64	CVE-2026-58013	中危	2.88.0-1	glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-0t64	CVE-2026-58014	中危	2.88.0-1	glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-0t64	CVE-2026-58015	中危	2.88.0-1	glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-0t64	CVE-2026-58016	中危	2.88.0-1	glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
libglib2.0-data	CVE-2026-15588	中危	2.88.0-1	GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-07-20 12:17 修改: 2026-09-10 18:17
libglib2.0-data	CVE-2026-16118	中危	2.88.0-1	xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-07-17 20:17 修改: 2026-09-11 10:16
libglib2.0-data	CVE-2026-58010	中危	2.88.0-1	glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-data	CVE-2026-58011	中危	2.88.0-1	glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-data	CVE-2026-58012	中危	2.88.0-1	glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-data	CVE-2026-58013	中危	2.88.0-1	glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-data	CVE-2026-58014	中危	2.88.0-1	glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-data	CVE-2026-58015	中危	2.88.0-1	glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18
libglib2.0-data	CVE-2026-58016	中危	2.88.0-1	glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
libjq1	CVE-2026-41256	中危	1.8.1-4ubuntu2	jq: embedded NUL truncates top-level jq programs loaded with -f 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1	CVE-2026-41257	中危	1.8.1-4ubuntu2	jq: signed-int overflow in stack_reallocate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1	CVE-2026-43895	中危	1.8.1-4ubuntu2	jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1	CVE-2026-43896	中危	1.8.1-4ubuntu2	jq: stack overflow in recursive object merge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1	CVE-2026-44777	中危	1.8.1-4ubuntu2	jq: stack overflow in module loading on mutual include 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libopenexr-3-1-30	CVE-2025-12495	中危	3.1.13-2build1	OpenEXR: OpenEXR: Remote Code Execution via malicious EXR file parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12495 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-12-23 22:15 修改: 2026-06-17 08:32
libopenexr-3-1-30	CVE-2025-12839	中危	3.1.13-2build1	OpenEXR: OpenEXR: Remote Code Execution via Heap-based Buffer Overflow in EXR File Parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12839 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-12-23 22:15 修改: 2026-06-17 08:33
libopenexr-3-1-30	CVE-2025-12840	中危	3.1.13-2build1	OpenEXR: OpenEXR: Remote Code Execution via EXR file parsing heap-based buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12840 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-12-23 22:15 修改: 2026-06-17 08:33
libopenexr-3-1-30	CVE-2025-48072	中危	3.1.13-2build1	openexr: OpenEXR Out of Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48072 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-07-31 21:15 修改: 2026-06-17 09:29
libopenexr-3-1-30	CVE-2026-27622	中危	3.1.13-2build1	openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27622 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-03-03 23:15 修改: 2026-07-15 02:19
libopenexr-3-1-30	CVE-2026-34380	中危	3.1.13-2build1	OpenEXR: OpenEXR: Denial of Service due to signed integer overflow in image decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34380 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:38
libopenexr-3-1-30	CVE-2026-34588	中危	3.1.13-2build1	OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34588 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-04-06 16:16 修改: 2026-07-15 02:20
libopenjp2-7	CVE-2023-39328	中危	2.5.4-1ubuntu0.1	openjpeg: denail of service via crafted image file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39328 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2024-07-09 14:15 修改: 2026-06-26 10:16
libopenjp2-7	CVE-2023-39329	中危	2.5.4-1ubuntu0.1	openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39329 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2024-07-13 03:15 修改: 2026-06-17 06:12
libp11-kit0	CVE-2026-13757	中危	0.26.2-2	p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libpixman-1-0	CVE-2023-37769	中危	0.46.4-1	stress-test master commit e4c878 was discovered to contain a FPE vulne ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2023-07-17 20:15 修改: 2026-06-17 06:08
libsqlite3-0	CVE-2026-39113	中危	3.46.1-9ubuntu0.2	Buffer Overflow vulnerability in SQLite affected version source snapsh ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04
libx264-165	CVE-2025-25467	中危	2:0.165.3222+gitb35605ac-3build1	Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
locales	CVE-2026-18374	中危	2.43-2ubuntu2.4	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
nodejs	CVE-2024-21890	中危	24.15.0-1nodesource1	nodejs: improper handling of wildcards in --allow-fs-read and --allow-fs-write 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21890 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2024-02-20 02:15 修改: 2026-06-17 07:10
rust-coreutils	CVE-2026-35341	中危	0.8.0-0ubuntu3	A vulnerability in uutils coreutils mkfifo allows for the unauthorized ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35341 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35344	中危	0.8.0-0ubuntu3	The dd utility in uutils coreutils suppresses errors during file trunc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35344 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35345	中危	0.8.0-0ubuntu3	A vulnerability in the tail utility of uutils coreutils allows for the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35345 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35348	中危	0.8.0-0ubuntu3	The sort utility in uutils coreutils is vulnerable to a process panic ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35348 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35350	中危	0.8.0-0ubuntu3	The cp utility in uutils coreutils fails to properly handle setuid and ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35350 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35351	中危	0.8.0-0ubuntu3	The mv utility in uutils coreutils fails to preserve file ownership du ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35351 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35352	中危	0.8.0-0ubuntu3	A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35352 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35354	中危	0.8.0-0ubuntu3	A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35354 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35357	中危	0.8.0-0ubuntu3	The cp utility in uutils coreutils is vulnerable to an information dis ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35357 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35359	中危	0.8.0-0ubuntu3	A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35359 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35360	中危	0.8.0-0ubuntu3	The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35360 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35363	中危	0.8.0-0ubuntu3	A vulnerability in the rm utility of uutils coreutils allows the bypas ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35363 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35364	中危	0.8.0-0ubuntu3	A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35364 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35367	中危	0.8.0-0ubuntu3	The nohup utility in uutils coreutils creates its default output file, ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35367 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35368	中危	0.8.0-0ubuntu3	A vulnerability exists in the chroot utility of uutils coreutils when ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35368 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35370	中危	0.8.0-0ubuntu3	The id utility in uutils coreutils miscalculates the groups= section o ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35370 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35371	中危	0.8.0-0ubuntu3	The id utility in uutils coreutils exhibits incorrect behavior in its ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35371 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35373	中危	0.8.0-0ubuntu3	A logic error in the ln utility of uutils coreutils causes the program ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35373 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35374	中危	0.8.0-0ubuntu3	A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35374 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35377	中危	0.8.0-0ubuntu3	A logic error in the env utility of uutils coreutils causes a failure ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35377 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
tar	CVE-2026-18477	中危	1.35+dfsg-4ubuntu0.4	tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
tar	CVE-2026-18508	中危	1.35+dfsg-4ubuntu0.4	tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
zlib1g	CVE-2026-85091	中危	1:1.3.dfsg+really1.3.1-1ubuntu3.1	zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
login.defs	CVE-2024-56433	低危	1:4.17.4-2ubuntu3	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libopenexr-3-1-30	CVE-2021-45942	低危	3.1.13-2build1	OpenEXR: heap-based buffer overflow in Imf_3_1:LineCompositeTask:execute 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45942 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2022-01-01 01:15 修改: 2026-06-17 04:14
passwd	CVE-2024-56433	低危	1:4.17.4-2ubuntu3	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libde265-0	CVE-2025-61147	低危	1.0.16-1build1	strukturag libde265 commit d9fea9d wa discovered to contain a segmenta ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61147 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2026-02-23 20:28 修改: 2026-06-17 09:50
libelf1t64	CVE-2025-1352	低危	0.194-4	elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
libopenjp2-7	CVE-2019-6988	低危	2.5.4-1ubuntu0.1	openjpeg: DoS via memory exhaustion in opj_decompress 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6988 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2019-01-28 16:29 修改: 2026-06-17 02:39
libelf1t64	CVE-2025-1376	低危	0.194-4	elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
libcairo2	CVE-2017-7475	低危	1.18.4-3	cairo: NULL pointer dereference with a crafted font file 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
libcairo2	CVE-2018-18064	低危	1.18.4-3	cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
libsystemd0	CVE-2026-40228	低危	259.5-0ubuntu3.4	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
systemd-standalone-sysusers	CVE-2026-40228	低危	259.5-0ubuntu3.4	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:a3cb212ed69f1c5905b12590595451abd66c209f1d008c9829f39ecfcb744450 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1	CVE-2026-40228	低危	259.5-0ubuntu3.4	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcairo-gobject2	CVE-2017-7475	低危	1.18.4-3	cairo: NULL pointer dereference with a crafted font file 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
libcairo-gobject2	CVE-2018-18064	低危	1.18.4-3	cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064 镜像层: sha256:1c7ab1ea3a88f2d954684fa9e42f28f154ff5c7a81bd87939470e7c1036e51b6 发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

Node.js (node-pkg)

低危漏洞:5

中危漏洞:20

高危漏洞:29

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
tar	CVE-2026-59873	严重	7.5.11	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar	CVE-2026-59873	严重	7.5.16	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion	CVE-2026-69152	高危	2.1.1	1.1.18, 2.1.4, 3.0.6, 5.0.9	brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion	CVE-2026-13149	高危	5.0.4	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion	CVE-2026-14257	高危	5.0.4	5.0.8, 3.0.3, 2.1.3, 1.1.17	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion	CVE-2026-69152	高危	5.0.4	1.1.18, 2.1.4, 3.0.6, 5.0.9	brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
fast-uri	CVE-2026-18446	高危	3.1.4	2.4.4, 3.1.5, 4.1.2	fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-31 15:16 修改: 2026-09-02 14:42
fast-uri	CVE-2026-75899	高危	3.1.4	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75899 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:43
fast-uri	CVE-2026-75931	高危	3.1.4	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Host confusion via skipped IDN canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75931 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri	CVE-2026-75975	高危	3.1.4	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75975 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri	CVE-2026-76172	高危	3.1.4	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76172 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-24 11:16 修改: 2026-09-02 14:43
ip-address	CVE-2026-69192	高危	10.1.0	10.3.1	ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-08-03 20:17 修改: 2026-09-10 20:30
js-yaml	CVE-2026-84375	高危	4.3.0	4.3.2, 3.15.2	js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84375 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-09-01 22:17 修改: 2026-09-09 21:09
js-yaml	GHSA-5p4m-2wfm-xmqj	高危	4.3.0	4.3.1, 3.15.1	JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported 漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
multer	CVE-2026-77037	高危	2.2.0	2.3.0	multer vulnerable to Denial of Service via file descriptor leak on aborted uploads 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77037 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-28 22:16 修改: 2026-09-02 14:47
multer	CVE-2026-77078	高危	2.2.0	2.3.0	multer vulnerable to Denial of Service via crafted multipart field names 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77078 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-28 22:16 修改: 2026-09-02 14:46
multer	CVE-2026-82333	高危	2.2.0	2.3.0	multer vulnerable to Denial of Service via oversized array index in field names 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82333 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-28 22:16 修改: 2026-09-02 14:45
nodemailer	GHSA-2x7j-588g-ccc2	高危	9.0.5	9.1.0	Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list 漏洞详情: https://github.com/advisories/GHSA-2x7j-588g-ccc2 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-09-08 21:33 修改: 2026-09-08 21:33
pacote	CVE-2026-9496	高危	21.5.0	21.5.1	Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10
picomatch	CVE-2026-33671	高危	4.0.3	4.0.4, 3.0.2, 2.3.2	picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
sharp	GHSA-rgj7-g3m4-5g8c	高危	0.35.3	0.35.4	sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 漏洞详情: https://github.com/advisories/GHSA-rgj7-g3m4-5g8c 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-09-08 21:25 修改: 2026-09-08 21:25
sigstore	CVE-2026-48815	高危	4.1.0	4.1.1	sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
socket.io-parser	CVE-2026-69185	高危	4.2.6	4.2.7, 3.4.5, 3.3.6	socket.io-parser: Socket.IO: Denial of Service via memory exhaustion from crafted packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69185 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-03 20:17 修改: 2026-09-10 20:30
brace-expansion	CVE-2026-13149	高危	2.1.1	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar	CVE-2026-59874	高危	7.5.11	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar	CVE-2026-73566	高危	7.5.11	7.5.21	tar: node-tar: Denial of Service via crafted long-path tar archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
brace-expansion	CVE-2026-14257	高危	2.1.1	5.0.8, 3.0.3, 2.1.3, 1.1.17	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
tar	CVE-2026-59874	高危	7.5.16	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar	CVE-2026-73566	高危	7.5.16	7.5.21	tar: node-tar: Denial of Service via crafted long-path tar archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
undici	CVE-2026-12151	高危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-06-17 17:16 修改: 2026-09-11 13:17
ws	CVE-2026-48779	高危	8.20.1	5.2.5, 6.2.4, 7.5.11, 8.21.0	ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-06-17 13:20 修改: 2026-09-11 13:18
@sigstore/verify	CVE-2026-48816	中危	3.1.0	3.1.1	sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
ip-address	CVE-2026-42338	中危	10.1.0	10.1.1	ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-05-12 20:16 修改: 2026-09-11 13:17
brace-expansion	CVE-2026-33750	中危	5.0.4	5.0.5, 3.0.2, 2.0.3, 1.1.13	brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
nodemailer	GHSA-8m3c-c648-2xjj	中危	9.0.5	9.1.1	Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature 漏洞详情: https://github.com/advisories/GHSA-8m3c-c648-2xjj 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-09-08 21:16 修改: 2026-09-08 21:16
nodemailer	GHSA-cc9r-2j5m-2m83	中危	9.0.5	9.1.0	Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain 漏洞详情: https://github.com/advisories/GHSA-cc9r-2j5m-2m83 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-09-08 21:32 修改: 2026-09-08 21:32
nodemailer	GHSA-wmmp-3585-3rmp	中危	9.0.5	9.1.0	Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain 漏洞详情: https://github.com/advisories/GHSA-wmmp-3585-3rmp 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-09-08 21:33 修改: 2026-09-08 21:33
tar	CVE-2026-53655	中危	7.5.11	7.5.16	node-tar: node-tar: File smuggling due to inconsistent tar archive parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar	CVE-2026-59871	中危	7.5.11	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	7.5.11	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
brace-expansion	CVE-2026-45149	中危	5.0.4	5.0.6	brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
@sigstore/core	CVE-2026-48758	中危	3.2.0	3.2.1	sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
picomatch	CVE-2026-33672	中危	4.0.3	4.0.4, 3.0.2, 2.3.2	picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
tar	CVE-2026-59871	中危	7.5.16	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	7.5.16	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
qs	CVE-2026-82417	中危	6.15.3	6.16.0	qs: qs: Denial of Service via improper validation in stringify function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
undici	CVE-2026-15157	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: undici: HTTP header injection via unvalidated blob-like body type property 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici	CVE-2026-16728	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici	CVE-2026-16729	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: Undici: Cookie attribute injection allows bypassing security protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici	CVE-2026-9679	中危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
qs	CVE-2026-82562	中危	6.15.3	6.16.0	qs: qs: Denial of Service via array limit bypass in query string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82562 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-30 01:20 修改: 2026-09-03 18:00
esbuild	GHSA-g7r4-m6w7-qqqr	低危	0.27.4	0.28.1	esbuild allows arbitrary file read when running the development server on Windows 漏洞详情: https://github.com/advisories/GHSA-g7r4-m6w7-qqqr 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-06-12 20:08 修改: 2026-06-12 20:08
postcss-selector-parser	CVE-2026-9358	低危	7.1.1	6.1.3, 7.1.3	postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9358 镜像层: sha256:1ba4ab8a6881cbb2b000afc54f133286311a4a57cc201cd01f9e82f12aa2612f 发布日期: 2026-05-24 06:16 修改: 2026-07-23 11:10
undici	CVE-2026-11525	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici	CVE-2026-6733	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
multer	CVE-2026-77063	低危	2.2.0	2.3.0	multer vulnerable to file size limit bypass via async fileFilter race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77063 镜像层: sha256:b66c7fa30b7a45b33c9f4fc1861c74aa30ad7d128e7ea74ef2661b954b877111 发布日期: 2026-08-28 22:16 修改: 2026-09-02 14:46

usr/bin/pebble (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:8

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-05-22 16:16 修改: 2026-09-11 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:9b50aebdde6499b392b5bdd0834a0ae6d86272379426b40fd4e49315b12a5bee 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37