ghcr.io/labring/fastgpt-mcp_server:v4.14.23 linux/amd64

ghcr.io/labring/fastgpt-mcp_server:v4.14.23 - Trivy安全扫描结果 扫描时间: 2026-08-04 17:05
全部漏洞信息
低危漏洞:43 中危漏洞:180 高危漏洞:130 严重漏洞:25

系统OS: alpine 3.23.4 扫描引擎: Trivy 扫描时间: 2026-08-04 17:05

ghcr.io/labring/fastgpt-mcp_server:v4.14.23 (alpine 3.23.4) (alpine)
低危漏洞:20 中危漏洞:8 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-08-03 13:18
libssl3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-08-03 13:18
libcrypto3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
Node.js (node-pkg)
低危漏洞:21 中危漏洞:151 高危漏洞:114 严重漏洞:24
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
decompress CVE-2026-53486 严重 4.2.1 decompress: @xhmikosr/decompress: Decompress: Arbitrary file read/write via crafted archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53486

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:29
fast-xml-parser CVE-2026-25896 严重 4.2.5 5.3.5, 4.5.4 fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25896

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-20 21:19 修改: 2026-07-21 12:17
fast-xml-parser CVE-2026-25896 严重 5.2.5 5.3.5, 4.5.4 fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25896

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-20 21:19 修改: 2026-07-21 12:17
form-data CVE-2025-7783 严重 2.3.3 2.5.4, 3.0.4, 4.0.4 form-data: Unsafe random function in form-data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7783

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-07-18 17:15 修改: 2026-06-17 10:05
i18next-fs-backend CVE-2026-48713 严重 2.6.0 2.6.6 i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48713

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-15 22:16 修改: 2026-06-17 16:39
protobufjs CVE-2026-41242 严重 7.4.0 8.0.1, 7.5.5 protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41242

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-18 17:16 修改: 2026-07-15 02:21
tar CVE-2026-59873 严重 7.5.13 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.5.13 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
vm2 CVE-2026-24118 严重 3.10.5 3.11.0 vm2: vm2: Arbitrary code execution due to sandbox breakout

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24118

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:18
vm2 CVE-2026-24781 严重 3.10.5 3.11.0 vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24781

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:18
vm2 CVE-2026-26332 严重 3.10.5 3.11.0 vm2: vm2: Arbitrary code execution via SuppressedError sandbox escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26332

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:19
vm2 CVE-2026-43997 严重 3.10.5 3.11.0 vm2: vm2: Arbitrary code execution via sandbox escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43997

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-43999 严重 3.10.5 3.11.0 vm2: vm2: Remote code execution via NodeVM builtin allowlist bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43999

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-44005 严重 3.10.5 3.11.0 vm2: vm2: Sandbox Escape leading to Arbitrary Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44005

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-44006 严重 3.10.5 3.11.0 vm2: vm2: Sandbox escape via arbitrary prototype access leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44006

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-44007 严重 3.10.5 3.11.1 vm2: vm2: Arbitrary code execution via nested NodeVM bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44007

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-44008 严重 3.10.5 3.11.2 vm2: vm2: Arbitrary code execution due to sandbox escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44008

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-44009 严重 3.10.5 3.11.2 vm2: vm2: Arbitrary Code Execution via Sandbox Escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44009

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-45411 严重 3.10.5 3.11.3 vm2: vm2: Arbitrary Code Execution due to sandbox escape vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45411

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:22
vm2 CVE-2026-47131 严重 3.10.5 3.11.4 vm2: vm2: Arbitrary code execution via sandbox escape vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47131

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47137 严重 3.10.5 3.11.4 vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47137

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47140 严重 3.10.5 3.11.4 vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47140

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47208 严重 3.10.5 3.11.4 vm2: vm2: Sandbox Breakout Using Promise Species

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47208

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47210 严重 3.10.5 3.11.4 vm2: vm2: Arbitrary code execution via sandbox escape when executing untrusted code with async support.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47210

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
brace-expansion CVE-2026-14257 高危 5.0.5 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 5.0.5 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 5.0.5 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-08-03 17:16 修改: 2026-08-03 21:16
brace-expansion CVE-2026-69152 高危 5.0.5 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-08-03 17:16 修改: 2026-08-03 21:16
@grpc/grpc-js CVE-2026-48068 高危 1.13.0 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48068

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-14 20:17 修改: 2026-07-21 16:17
defu CVE-2026-35209 高危 6.1.4 6.1.5 defu: Prototype pollution via `__proto__` key in defaults argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35209

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-06 18:16 修改: 2026-07-21 19:10
express-rate-limit CVE-2026-30827 高危 8.2.1 8.2.2, 8.1.1, 8.0.2 express-rate-limit: express-rate-limit: Denial of Service for IPv4 clients due to incorrect IPv6 subnet masking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-30827

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-07 06:16 修改: 2026-06-17 10:32
fast-uri CVE-2026-13676 高危 3.0.6 4.0.1, 3.1.3, 2.4.2 fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13676

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-29 14:16 修改: 2026-08-03 13:17
fast-uri CVE-2026-16221 高危 3.0.6 2.4.3, 3.1.4, 4.1.1 Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-19 15:16 修改: 2026-07-21 18:31
fast-uri CVE-2026-18446 高危 3.0.6 2.4.4, 3.1.5, 4.1.2 fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forw ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17
fast-uri CVE-2026-6321 高危 3.0.6 3.1.1 fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6321

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-04 20:16 修改: 2026-07-21 12:19
fast-uri CVE-2026-6322 高危 3.0.6 3.1.2 fast-uri: fast-uri: URI authority bypass due to improper delimiter handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6322

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-05 11:16 修改: 2026-08-03 13:18
fast-xml-builder CVE-2026-44665 高危 1.1.4 1.1.7 fast-xml-builder: fast-xml-builder: Attribute injection leading to information disclosure or content manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44665

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:51
@grpc/grpc-js CVE-2026-48069 高危 1.13.0 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48069

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-14 20:17 修改: 2026-07-15 20:23
fast-xml-parser CVE-2026-26278 高危 4.2.5 4.5.4, 5.3.6 fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26278

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-19 20:25 修改: 2026-07-21 12:17
fast-xml-parser CVE-2026-33036 高危 4.2.5 5.5.6, 4.5.5 fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33036

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-20 06:16 修改: 2026-06-17 10:36
@hono/node-server CVE-2026-29087 高危 1.19.9 1.19.10 @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29087

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:29
fast-xml-parser CVE-2026-25128 高危 5.2.5 5.3.4 fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25128

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-01-30 16:16 修改: 2026-06-17 10:24
fast-xml-parser CVE-2026-26278 高危 5.2.5 4.5.4, 5.3.6 fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26278

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-19 20:25 修改: 2026-07-21 12:17
fast-xml-parser CVE-2026-33036 高危 5.2.5 5.5.6, 4.5.5 fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33036

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-20 06:16 修改: 2026-06-17 10:36
@xmldom/xmldom CVE-2026-34601 高危 0.8.10 0.8.12, 0.9.9 xmldom: xmldom: XML structure injection via CDATA terminator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34601

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-02 18:16 修改: 2026-07-21 19:10
form-data CVE-2026-12143 高危 2.3.3 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 19:16 修改: 2026-08-03 13:17
form-data CVE-2026-12143 高危 4.0.4 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 19:16 修改: 2026-08-03 13:17
form-data CVE-2026-12143 高危 4.0.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 19:16 修改: 2026-08-03 13:17
hono CVE-2026-29045 高危 4.11.7 4.12.4 Hono vulnerable to arbitrary file access via serveStatic vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29045

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:29
hono CVE-2026-54290 高危 4.11.7 4.12.25 hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54290

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-22 19:49
@xmldom/xmldom CVE-2026-41672 高危 0.8.10 0.8.13, 0.9.10 xmldom: @xmldom/xmldom: xmldom: Arbitrary XML Node Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41672

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 04:16 修改: 2026-07-15 02:21
i18next-fs-backend CVE-2026-41693 高危 2.6.0 2.6.4 i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41693

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-08 16:16 修改: 2026-06-17 10:47
immutable CVE-2026-29063 高危 5.0.3 4.3.8, 5.1.5, 3.8.3 immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29063

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-06 19:16 修改: 2026-08-03 13:17
immutable CVE-2026-59879 高危 5.0.3 4.3.9, 5.1.8 Immutable.js provides many Persistent Immutable data structures. Prior ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59879

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:48
immutable CVE-2026-59880 高危 5.0.3 4.3.9, 5.1.8 Immutable.js provides many Persistent Immutable data structures. Prior ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59880

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:49
ip CVE-2024-29415 高危 1.1.9 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2024-05-27 20:15 修改: 2026-06-17 07:22
ip-address CVE-2026-69192 高危 10.0.1 10.3.1 ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-08-03 20:17 修改: 2026-08-03 20:17
ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-08-03 20:17 修改: 2026-08-03 20:17
ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-08-03 20:17 修改: 2026-08-03 20:17
js-cookie CVE-2026-46625 高危 3.0.5 3.0.7 js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46625

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-10 22:16 修改: 2026-07-30 12:18
js-yaml CVE-2026-59869 高危 4.1.1 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
lodash CVE-2026-4800 高危 4.17.23 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-31 20:16 修改: 2026-08-03 13:18
mongoose CVE-2026-42334 高危 8.12.1 6.13.9, 7.8.9, 8.22.1, 9.1.6 Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42334

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-14 18:16 修改: 2026-06-17 10:47
multer CVE-2026-3520 高危 2.1.0 2.1.1 multer: Multer: Denial of Service via malformed requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3520

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-04 17:16 修改: 2026-07-15 02:21
multer CVE-2026-5079 高危 2.1.0 2.2.0, 3.0.0-alpha.2 multer: Multer: Denial of Service via deeply nested field names in multipart form data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5079

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-15 14:16 修改: 2026-06-17 10:58
next CVE-2026-44573 高危 16.2.4 15.5.16, 16.2.5 next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44573

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 17:16 修改: 2026-07-16 12:17
next CVE-2026-44574 高危 16.2.4 15.5.16, 16.2.5 Next.js: Next.js: Authorization bypass via crafted query parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44574

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 17:16 修改: 2026-07-16 12:17
next CVE-2026-44575 高危 16.2.4 15.5.16, 16.2.5 next.js: Next.js: Unauthorized access to protected content via middleware bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44575

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 17:16 修改: 2026-07-31 13:18
next CVE-2026-44578 高危 16.2.4 15.5.16, 16.2.5 Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44578

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-16 12:17
next CVE-2026-44579 高危 16.2.4 15.5.16, 16.2.5 next.js: Next.js: Denial of Service via crafted POST requests to server actions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44579

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:22
next CVE-2026-45109 高危 16.2.4 15.5.18, 16.2.6 next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45109

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-16 12:17
next CVE-2026-64641 高危 16.2.4 15.5.21, 16.2.11 next: Next.js: Denial of Service via crafted requests to App Router with Server Actions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64641

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:36
next CVE-2026-64642 高危 16.2.4 16.2.11 next: Next.js: Authentication bypass leading to unauthorized access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64642

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:36
next CVE-2026-64645 高危 16.2.4 15.5.21, 16.2.11 next: Next.js: Server-Side Request Forgery vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64645

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:39
next CVE-2026-64649 高危 16.2.4 15.5.21, 16.2.11 next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64649

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 20:16 修改: 2026-07-29 14:38
next GHSA-8h8q-6873-q5fj 高危 16.2.4 15.5.16, 16.2.5 Next.js Vulnerable to Denial of Service with Server Components

漏洞详情: https://github.com/advisories/GHSA-8h8q-6873-q5fj

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-11 14:50 修改: 2026-05-11 14:50
path-to-regexp CVE-2026-4867 高危 0.1.12 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
path-to-regexp CVE-2026-4926 高危 8.2.0 8.4.0 path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4926

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 19:17 修改: 2026-08-03 13:18
picomatch CVE-2026-33671 高危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
picomatch CVE-2026-33671 高危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
postcss CVE-2026-45623 高危 8.4.31 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 18:16 修改: 2026-07-30 19:57
postcss GHSA-r28c-9q8g-f849 高危 8.4.31 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
postcss CVE-2026-45623 高危 8.5.6 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 18:16 修改: 2026-07-30 19:57
postcss GHSA-r28c-9q8g-f849 高危 8.5.6 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
@xmldom/xmldom CVE-2026-41673 高危 0.8.10 0.8.13, 0.9.10 @xmldom/xmldom: xmldom: xmldom: Denial of Service via deeply nested XML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41673

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 04:16 修改: 2026-07-15 02:21
protobufjs CVE-2026-44289 高危 7.4.0 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44289

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-07-27 13:18
protobufjs CVE-2026-44290 高危 7.4.0 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via crafted schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44290

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44291 高危 7.4.0 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44291

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44293 高危 7.4.0 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44293

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-08-03 13:18
protobufjs CVE-2026-48712 高危 7.4.0 7.6.1, 8.4.1 protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
protobufjs CVE-2026-44289 高危 7.5.5 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44289

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-07-27 13:18
protobufjs CVE-2026-44290 高危 7.5.5 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via crafted schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44290

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44291 高危 7.5.5 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44291

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44293 高危 7.5.5 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44293

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-08-03 13:18
protobufjs CVE-2026-48712 高危 7.5.5 7.6.1, 8.4.1 protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
rollup CVE-2026-27606 高危 4.35.0 2.80.0, 3.30.0, 4.59.0 rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27606

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-25 03:16 修改: 2026-07-20 12:18
sharp GHSA-f88m-g3jw-g9cj 高危 0.34.5 0.35.0 sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

漏洞详情: https://github.com/advisories/GHSA-f88m-g3jw-g9cj

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-21 22:07 修改: 2026-07-21 22:07
sigstore CVE-2026-48815 高危 4.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
@xmldom/xmldom CVE-2026-41674 高危 0.8.10 0.8.13, 0.9.10 xmldom: xmldom: Arbitrary XML markup injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41674

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 04:16 修改: 2026-08-03 13:18
@xmldom/xmldom CVE-2026-41675 高危 0.8.10 0.8.13, 0.9.10 xmldom: xmldom: Arbitrary XML node injection via crafted processing instructions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41675

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 04:16 修改: 2026-07-15 02:21
tar CVE-2026-59874 高危 7.5.13 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-59874 高危 7.5.13 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
underscore CVE-2026-27601 高危 1.13.7 1.13.8 Underscore.js: Underscore.js: Denial of Service via recursive data structures in flatten and isEqual functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27601

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-03 23:15 修改: 2026-06-17 10:27
undici CVE-2026-12151 高危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 17:16 修改: 2026-07-30 12:17
undici CVE-2026-12151 高危 7.18.2 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 17:16 修改: 2026-07-30 12:17
undici CVE-2026-13697 高危 7.18.2 7.29.0, 8.9.0 undici's cache interceptor mishandles malformed Cache-Control private ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
undici CVE-2026-1526 高危 7.18.2 6.24.0, 7.24.0 undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1526

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-12 21:16 修改: 2026-07-15 02:18
undici CVE-2026-1528 高危 7.18.2 6.24.0, 7.24.0 undici: undici: Denial of Service via crafted WebSocket frame with large length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1528

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-12 21:16 修改: 2026-07-15 02:18
undici CVE-2026-2229 高危 7.18.2 6.24.0, 7.24.0 undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2229

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-12 21:16 修改: 2026-07-15 02:19
undici CVE-2026-12151 高危 7.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 17:16 修改: 2026-07-30 12:17
undici CVE-2026-13697 高危 7.25.0 7.29.0, 8.9.0 undici's cache interceptor mishandles malformed Cache-Control private ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
undici CVE-2026-6734 高危 7.25.0 7.28.0, 8.2.0 undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6734

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-08-03 13:18
undici CVE-2026-9697 高危 7.25.0 7.28.0, 8.5.0 undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9697

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-07-30 12:19
vite CVE-2026-39363 高危 6.2.2 8.0.5, 7.3.2, 6.4.2 Vite: Vite: Information disclosure via WebSocket connection bypasses access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39363

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-07 20:16 修改: 2026-07-24 21:10
vite CVE-2026-53571 高危 6.2.2 8.0.16, 7.3.5, 6.4.3 vite: `server.fs.deny` bypass on Windows alternate paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53571

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:44
axios CVE-2026-42033 高危 1.13.6 1.15.1, 0.31.1 axios: Axios: HTTP Transport Hijacking via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42033

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-08-03 13:18
axios CVE-2026-42035 高危 1.13.6 1.15.1, 0.31.1 axios: Axios: Arbitrary HTTP header injection via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42035

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42043 高危 1.13.6 1.15.1, 0.31.1 axios: Axios: NO_PROXY bypass via crafted URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42043

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-07-31 13:18
axios CVE-2026-42264 高危 1.13.6 1.15.2 axios: Axios: Prototype pollution allows information disclosure and request manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42264

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-08 04:16 修改: 2026-08-03 13:18
axios CVE-2026-44486 高危 1.13.6 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44486

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-11 17:16 修改: 2026-08-03 13:18
axios CVE-2026-44487 高危 1.13.6 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via redirect flows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44487

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-11 17:16 修改: 2026-08-03 13:18
axios CVE-2026-44488 高危 1.13.6 1.16.0 axios: Axios: Denial of Service due to unenforced request and response size limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44488

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-11 17:16 修改: 2026-08-03 13:18
axios CVE-2026-44494 高危 1.13.6 1.16.0 axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44494

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-11 17:16 修改: 2026-08-03 13:18
axios CVE-2026-44495 高危 1.13.6 1.15.2, 0.31.1 axios: Axios: Information disclosure due to prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44495

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-11 17:16 修改: 2026-08-03 13:18
axios CVE-2026-44496 高危 1.13.6 1.16.0, 0.32.0 axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44496

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-11 17:16 修改: 2026-08-03 13:18
basic-ftp CVE-2026-39983 高危 5.2.0 5.2.1 basic-ftp: basic-ftp: Command injection via CRLF sequences in file path parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39983

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-09 18:17 修改: 2026-07-15 02:20
basic-ftp CVE-2026-41324 高危 5.2.0 5.3.0 basic-ftp: basic-ftp: Denial of Service via unbounded memory growth from malicious directory listings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41324

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 04:16 修改: 2026-06-17 10:46
basic-ftp CVE-2026-44240 高危 5.2.0 5.3.1 basic-ftp: basic-ftp: Client-side Denial of Service via unterminated multiline FTP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44240

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-12 21:16 修改: 2026-06-17 10:50
basic-ftp GHSA-6v7q-wjvx-w8wg 高危 5.2.0 5.2.2 basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

漏洞详情: https://github.com/advisories/GHSA-6v7q-wjvx-w8wg

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-10 20:18 修改: 2026-04-10 20:18
brace-expansion CVE-2026-13149 高危 5.0.5 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-13149 高危 5.0.5 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
vm2 CVE-2026-43998 高危 3.10.5 3.11.0 vm2: vm2: Remote code execution due to path restriction bypass via symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43998

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-44001 高危 3.10.5 3.11.0 vm2: vm2: Sandbox escape leads to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44001

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-44004 高危 3.10.5 3.11.0 vm2: vm2: Denial of Service via host memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44004

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-07-15 02:21
vm2 CVE-2026-47135 高危 3.10.5 3.11.4 vm2: vm2: Sandbox escape allows arbitrary code execution on the host system

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47135

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47139 高危 3.10.5 3.11.4 vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47139

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47209 高危 3.10.5 3.11.4 vm2: vm2: Integrity bypass via incorrect property assignment leading to potential arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47209

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
ws CVE-2026-48779 高危 8.20.0 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 13:20 修改: 2026-08-03 13:18
axios CVE-2026-42041 中危 1.13.6 1.15.1, 0.31.1 axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42041

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-08-03 13:18
axios CVE-2026-42042 中危 1.13.6 1.15.1, 0.31.1 axios: Axios: XSRF token bypass leading to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42042

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42044 中危 1.13.6 1.15.2 axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42044

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-08-03 13:18
axios CVE-2026-44490 中危 1.13.6 1.16.0, 0.32.0 axios: Axios: Information disclosure and denial of service due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44490

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:50
fast-xml-parser CVE-2026-33349 中危 4.2.5 4.5.5, 5.5.7 fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33349

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-24 20:16 修改: 2026-06-17 10:37
fast-xml-parser CVE-2026-41650 中危 4.2.5 5.7.0 fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
axios GHSA-42h9-826w-cgv3 中危 1.13.6 0.33.0, 1.18.0 Axios: Excessive recursion in formDataToJSON can cause denial of service

漏洞详情: https://github.com/advisories/GHSA-42h9-826w-cgv3

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-20 17:58 修改: 2026-07-20 17:58
axios GHSA-7q8q-rj6j-mhjq 中危 1.13.6 0.33.0, 1.18.0 Axios: Nested axios option objects can consume polluted prototype values

漏洞详情: https://github.com/advisories/GHSA-7q8q-rj6j-mhjq

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
axios GHSA-jqh4-m9w3-8hp9 中危 1.13.6 1.18.0 Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-jqh4-m9w3-8hp9

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-20 22:27 修改: 2026-07-20 22:27
next CVE-2026-44576 中危 16.2.4 15.5.16, 16.2.5 Next.js: Next.js: Cache poisoning vulnerability in React Server Components

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44576

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 17:16 修改: 2026-06-17 10:50
next CVE-2026-44577 中危 16.2.4 15.5.16, 16.2.5 Next.js: Next.js: Denial of Service via Image Optimization API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44577

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 17:16 修改: 2026-07-16 12:17
next CVE-2026-44580 中危 16.2.4 15.5.16, 16.2.5 next.js: Next.js: Cross-site scripting allows arbitrary code execution via untrusted script content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44580

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
next CVE-2026-44581 中危 16.2.4 15.5.16, 16.2.5 next.js: Next.js: Stored Cross-Site Scripting via malformed nonce values in cached responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44581

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
next CVE-2026-64643 中危 16.2.4 15.5.21, 16.2.11 next: Next.js: Information disclosure via Server Action ID exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64643

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:37
next CVE-2026-64644 中危 16.2.4 15.5.21, 16.2.11 next: Next.js: Denial of Service via malicious image optimization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64644

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:39
next CVE-2026-64646 中危 16.2.4 15.5.21, 16.2.11 next: Next.js: Denial of Service via excessive memory consumption in Server Actions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64646

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 19:17 修改: 2026-07-29 14:39
next CVE-2026-64647 中危 16.2.4 15.5.21, 16.2.11 next: Next.js: Information disclosure via server-side request caching

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64647

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 19:17 修改: 2026-07-29 14:38
next CVE-2026-64648 中危 16.2.4 15.5.21, 16.2.11 next: Next.js: Information disclosure via server-side fetch cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64648

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-27 20:16 修改: 2026-07-29 14:38
axios GHSA-mmx7-hfxf-jppx 中危 1.13.6 1.18.0, 0.33.0 Axios: Prototype pollution gadgets can alter axios request construction

漏洞详情: https://github.com/advisories/GHSA-mmx7-hfxf-jppx

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-20 22:25 修改: 2026-07-20 22:25
fast-xml-parser CVE-2026-33349 中危 5.2.5 4.5.5, 5.5.7 fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33349

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-24 20:16 修改: 2026-06-17 10:37
path-to-regexp CVE-2026-4923 中危 8.2.0 8.4.0 path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4923

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:57
fast-xml-parser CVE-2026-41650 中危 5.2.5 5.7.0 fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
picomatch CVE-2026-33672 中危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
fast-xml-parser CVE-2026-41650 中危 5.5.8 5.7.0 fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
picomatch CVE-2026-33672 中危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
file-type CVE-2026-31808 中危 21.3.0 21.3.1 file-type: file-type: Denial of Service due to infinite loop in ASF file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31808

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-10 21:16 修改: 2026-06-17 10:34
file-type CVE-2026-32630 中危 21.3.0 21.3.2 file-type: file-type: Denial of Service via excessive memory growth from crafted ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32630

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
postcss CVE-2026-41305 中危 8.4.31 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
postcss CVE-2026-69153 中危 8.4.31 8.5.23 PostCSS takes a CSS file and provides an API to analyze and modify its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-08-03 17:16 修改: 2026-08-03 19:16
follow-redirects GHSA-r4q5-vmmm-2653 中危 1.15.11 1.16.0 follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

漏洞详情: https://github.com/advisories/GHSA-r4q5-vmmm-2653

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-14 01:11 修改: 2026-04-14 01:11
axios GHSA-mwf2-3pr3-8698 中危 1.13.6 1.18.0 Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-mwf2-3pr3-8698

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
postcss CVE-2026-41305 中危 8.5.6 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
postcss CVE-2026-69153 中危 8.5.6 8.5.23 PostCSS takes a CSS file and provides an API to analyze and modify its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-08-03 17:16 修改: 2026-08-03 19:16
axios GHSA-pmv8-rq9r-6j72 中危 1.13.6 0.33.0, 1.18.0 Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

漏洞详情: https://github.com/advisories/GHSA-pmv8-rq9r-6j72

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-20 17:48 修改: 2026-07-20 17:48
ajv CVE-2025-69873 中危 8.17.1 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-11 19:15 修改: 2026-08-03 13:17
@protobufjs/utf8 CVE-2026-44288 中危 1.1.0 1.1.1 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
@sigstore/core CVE-2026-48758 中危 3.2.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
@sigstore/verify CVE-2026-48816 中危 3.1.0 3.1.1 sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
hono CVE-2026-29085 中危 4.11.7 4.12.4 Hono Vulnerable to SSE Control Field Injection via CR/LF in writeSSE()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29085

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:29
protobufjs CVE-2026-44288 中危 7.4.0 7.5.6, 8.0.2 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44292 中危 7.4.0 7.5.6, 8.0.2 protobufjs: protobufjs: Data integrity impact due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44292

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44294 中危 7.4.0 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44294

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-45740 中危 7.4.0 7.5.8, 8.2.0 protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
protobufjs CVE-2026-54269 中危 7.4.0 7.6.3, 8.6.0 protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
hono CVE-2026-29086 中危 4.11.7 4.12.4 Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29086

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:29
hono CVE-2026-39407 中危 4.11.7 4.12.12 Hono: Middleware bypass via repeated slashes in serveStatic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39407

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 15:16 修改: 2026-07-24 21:10
hono CVE-2026-39408 中危 4.11.7 4.12.12 Hono: Path traversal in toSSG() allows writing files outside the output directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39408

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 15:16 修改: 2026-07-24 21:10
hono CVE-2026-39409 中危 4.11.7 4.12.12 Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39409

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 15:16 修改: 2026-07-24 21:10
hono CVE-2026-39410 中危 4.11.7 4.12.12 Hono: Non-breaking space prefix bypass in cookie name handling in getCookie()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39410

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 15:16 修改: 2026-07-24 21:10
protobufjs CVE-2026-44288 中危 7.5.5 7.5.6, 8.0.2 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44292 中危 7.5.5 7.5.6, 8.0.2 protobufjs: protobufjs: Data integrity impact due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44292

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44294 中危 7.5.5 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44294

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-45740 中危 7.5.5 7.5.8, 8.2.0 protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
protobufjs CVE-2026-54269 中危 7.5.5 7.6.3, 8.6.0 protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
protobufjs CVE-2026-59877 中危 7.5.5 7.6.5, 8.6.6 protobufjs: protobufjs: Denial of Service via crafted .proto schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59877

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:53
qs CVE-2025-15284 中危 6.13.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2026-8723 中危 6.13.0 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.14.1 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.15.1 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2025-15284 中危 6.5.3 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
request CVE-2023-28155 中危 2.88.2 request: bypass of SSRF mitigations when following a cross-protocol redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28155

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2023-03-16 15:15 修改: 2026-06-17 05:46
hono CVE-2026-44455 中危 4.11.7 4.12.16 hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44455

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
hono CVE-2026-44456 中危 4.11.7 4.12.16 Hono: bodyLimit() can be bypassed for chunked / unknown-length requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44456

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
hono CVE-2026-44457 中危 4.11.7 4.12.18 Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44457

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
hono CVE-2026-44458 中危 4.11.7 4.12.18 Hono has CSS Declaration Injection via Style Object Values in JSX SSR

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44458

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
hono CVE-2026-47673 中危 4.11.7 4.12.21 Hono: JWT middleware accepts any Authorization scheme, not only Bearer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47673

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-28 17:16 修改: 2026-06-17 10:54
hono CVE-2026-47674 中危 4.11.7 4.12.21 Hono: IP Restriction bypasses static deny rules for non-canonical IPv6

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47674

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-28 17:16 修改: 2026-06-17 10:54
hono CVE-2026-47675 中危 4.11.7 4.12.21 Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47675

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-28 17:16 修改: 2026-06-17 10:54
tar CVE-2026-53655 中危 7.5.13 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-53655 中危 7.5.13 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.5.13 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59871 中危 7.5.13 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.5.13 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar CVE-2026-59875 中危 7.5.13 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 7.5.13 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
tar GHSA-r292-9mhp-454m 中危 7.5.13 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
tough-cookie CVE-2023-26136 中危 2.5.0 4.1.3 tough-cookie: prototype pollution in cookie memstore

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26136

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2023-07-01 05:15 修改: 2026-06-17 05:42
hono CVE-2026-47676 中危 4.11.7 4.12.21 Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47676

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-28 17:16 修改: 2026-06-17 10:54
hono CVE-2026-54286 中危 4.11.7 4.12.25 hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54286

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-23 15:16
undici CVE-2026-15157 中危 6.25.0 6.28.0, 7.29.0, 8.9.0 undici does not validate the type property of a duck-typed blob-like r ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
undici CVE-2026-16728 中危 6.25.0 6.28.0, 7.29.0, 8.9.0 undici's retry interceptor can deliver a response whose body length do ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-29 21:17 修改: 2026-07-30 16:43
undici CVE-2026-16729 中危 6.25.0 6.28.0, 7.29.0, 8.9.0 undici's setCookie function does not fully sanitize cookie attributes. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
undici CVE-2026-9679 中危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
hono CVE-2026-54287 中危 4.11.7 4.12.25 hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54287

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-22 19:49
hono CVE-2026-54288 中危 4.11.7 4.12.25 hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54288

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 19:17 修改: 2026-06-23 15:16
hono CVE-2026-54289 中危 4.11.7 4.12.25 hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54289

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-22 19:49
hono CVE-2026-56761 中危 4.11.7 4.12.14 hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56761

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-24 13:16 修改: 2026-06-26 19:59
hono CVE-2026-59895 中危 4.11.7 4.12.27 hono: Hono: Arbitrary markup injection via improper handling of class names in server-side rendering.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59895

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:53
undici CVE-2026-14643 中危 7.18.2 7.29.0, 8.9.0 undici's cache interceptor mishandles optional whitespace placed aroun ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
undici CVE-2026-15157 中危 7.18.2 6.28.0, 7.29.0, 8.9.0 undici does not validate the type property of a duck-typed blob-like r ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
undici CVE-2026-1525 中危 7.18.2 6.24.0, 7.24.0 undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1525

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-12 20:16 修改: 2026-06-17 10:15
undici CVE-2026-1527 中危 7.18.2 6.24.0, 7.24.0 undici: Undici: HTTP header injection and request smuggling vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1527

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-12 21:16 修改: 2026-06-17 10:16
undici CVE-2026-16728 中危 7.18.2 6.28.0, 7.29.0, 8.9.0 undici's retry interceptor can deliver a response whose body length do ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 21:17 修改: 2026-07-30 16:43
undici CVE-2026-16729 中危 7.18.2 6.28.0, 7.29.0, 8.9.0 undici's setCookie function does not fully sanitize cookie attributes. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
undici CVE-2026-2581 中危 7.18.2 7.24.0 undici: Undici: Denial of Service due to uncontrolled resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2581

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-12 21:16 修改: 2026-06-17 10:31
undici CVE-2026-9678 中危 7.18.2 7.28.0, 8.5.0 undici: Undici: Information disclosure due to improper cache-control header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
undici CVE-2026-9679 中危 7.18.2 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
hono CVE-2026-59897 中危 4.11.7 4.12.27 hono: Hono: Information disclosure due to incorrect header de-duplication in AWS API Gateway v1 adapter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59897

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:50
hono CVE-2026-69207 中危 4.11.7 4.12.34 Hono: ReDoS in CORS middleware via Access-Control-Request-Headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69207

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
hono GHSA-26pp-8wgv-hjvm 中危 4.11.7 4.12.12 Hono missing validation of cookie name on write path in setCookie()

漏洞详情: https://github.com/advisories/GHSA-26pp-8wgv-hjvm

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 00:17 修改: 2026-04-08 00:17
hono GHSA-v8w9-8mx6-g223 中危 4.11.7 4.12.7 Hono vulnerable to Prototype Pollution possible through __proto__ key allowed in parseBody({ dot: true })

漏洞详情: https://github.com/advisories/GHSA-v8w9-8mx6-g223

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-11 00:31 修改: 2026-03-11 00:31
undici CVE-2026-14643 中危 7.25.0 7.29.0, 8.9.0 undici's cache interceptor mishandles optional whitespace placed aroun ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
undici CVE-2026-15157 中危 7.25.0 6.28.0, 7.29.0, 8.9.0 undici does not validate the type property of a duck-typed blob-like r ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
undici CVE-2026-16728 中危 7.25.0 6.28.0, 7.29.0, 8.9.0 undici's retry interceptor can deliver a response whose body length do ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 21:17 修改: 2026-07-30 16:43
undici CVE-2026-16729 中危 7.25.0 6.28.0, 7.29.0, 8.9.0 undici's setCookie function does not fully sanitize cookie attributes. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
undici CVE-2026-9678 中危 7.25.0 7.28.0, 8.5.0 undici: Undici: Information disclosure due to improper cache-control header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
undici CVE-2026-9679 中危 7.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
uuid CVE-2026-41907 中危 3.4.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
@hono/node-server CVE-2026-39406 中危 1.19.9 1.19.13 @hono/node-server: Middleware bypass via repeated slashes in serveStatic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39406

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 15:16 修改: 2026-07-24 21:10
@hono/node-server GHSA-frvp-7c67-39w9 中危 1.19.9 2.0.5 Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

漏洞详情: https://github.com/advisories/GHSA-frvp-7c67-39w9

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-21 18:17 修改: 2026-07-21 18:17
vite CVE-2025-30208 中危 6.2.2 6.2.3, 6.1.2, 6.0.12, 5.4.15, 4.5.10 vite: Vite bypasses server.fs.deny when using `?raw??`

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30208

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-03-24 17:15 修改: 2026-06-17 09:08
vite CVE-2025-31125 中危 6.2.2 6.2.4, 6.1.3, 6.0.13, 5.4.16, 4.5.11 vite: Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31125

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-03-31 17:15 修改: 2026-06-17 09:09
vite CVE-2025-31486 中危 6.2.2 6.2.5, 6.1.4, 6.0.14, 5.4.17, 4.5.12 vite: Vite allows server.fs.deny to be bypassed with .svg or relative paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31486

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-04-03 19:15 修改: 2026-06-17 09:10
vite CVE-2025-32395 中危 6.2.2 6.2.6, 6.1.5, 6.0.15, 5.4.18, 4.5.13 vite: Vite has an `server.fs.deny` bypass with an invalid `request-target`

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32395

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-04-10 14:15 修改: 2026-06-17 09:11
vite CVE-2025-46565 中危 6.2.2 6.3.4, 6.2.7, 6.1.6, 5.4.19, 4.5.14 vite: Path Traversal in Vite Dev Server Allows Access to Restricted Files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46565

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-05-01 18:15 修改: 2026-06-17 09:26
vite CVE-2025-62522 中危 6.2.2 7.1.11, 7.0.8, 6.4.1, 5.4.21 vite: vite allows server.fs.deny bypass via backslash on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62522

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-20 20:15 修改: 2026-06-17 09:52
vite CVE-2026-39365 中危 6.2.2 8.0.5, 7.3.2, 6.4.2 vite: Vite: Information disclosure via path traversal in dev server's .map request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39365

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-07 20:16 修改: 2026-07-24 21:10
vite CVE-2026-53632 中危 6.2.2 8.0.16, 7.3.5, 6.4.3 launch-editor: launch-editor: Credential compromise via NTLMv2 password hash leak through UNC path access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53632

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-23 15:44
@opentelemetry/core CVE-2026-54285 中危 2.0.1 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
@opentelemetry/core CVE-2026-54285 中危 2.5.0 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
@opentelemetry/core CVE-2026-54285 中危 2.6.0 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
ajv CVE-2025-69873 中危 6.12.6 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-11 19:15 修改: 2026-08-03 13:17
brace-expansion CVE-2026-45149 中危 5.0.5 5.0.6 brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
ip-address CVE-2026-42338 中危 10.0.1 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-12 20:16 修改: 2026-08-03 13:18
brace-expansion CVE-2026-45149 中危 5.0.5 5.0.6 brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-05-12 20:16 修改: 2026-08-03 13:18
ajv CVE-2025-69873 中危 7.2.4 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-11 19:15 修改: 2026-08-03 13:17
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-12 20:16 修改: 2026-08-03 13:18
decompress CVE-2026-10732 中危 4.2.1 decompress: Decompress: Arbitrary file write leading to remote code execution via crafted ZIP archive (Zip Slip)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10732

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-05 07:16 修改: 2026-07-23 12:17
axios CVE-2025-62718 中危 1.13.6 1.15.0, 0.31.0 axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62718

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-09 15:16 修改: 2026-08-03 13:17
js-yaml CVE-2026-53550 中危 4.1.1 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
axios CVE-2026-40175 中危 1.13.6 1.15.0, 0.31.0 axios: Axios: Remote Code Execution via Prototype Pollution escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40175

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-10 20:16 修改: 2026-08-03 13:18
lodash CVE-2026-2950 中危 4.17.23 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
mdast-util-to-hast CVE-2025-66400 中危 13.2.0 13.2.1 mdast-util-to-hast: mdast-util-to-hast: Markdown code elements can appear as regular page content

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66400

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-12-01 23:15 修改: 2026-06-17 09:56
axios CVE-2026-42034 中危 1.13.6 1.15.1, 0.31.1 axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42034

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
mongoose GHSA-664h-wqgq-64gw 中危 8.12.1 6.13.10, 7.8.10, 8.24.1, 9.7.2 Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

漏洞详情: https://github.com/advisories/GHSA-664h-wqgq-64gw

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-24 16:22 修改: 2026-07-24 16:22
axios CVE-2026-42036 中危 1.13.6 1.15.1, 0.31.1 axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42036

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42037 中危 1.13.6 1.15.1 axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42037

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
multer CVE-2026-5038 中危 2.1.0 2.2.0, 3.0.0-alpha.2 multer: Multer: Denial of Service via aborted or malformed multipart uploads

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5038

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-15 16:16 修改: 2026-06-17 10:58
axios CVE-2026-42038 中危 1.13.6 1.15.1, 0.31.1 axios: Axios: Information disclosure due to `no_proxy` bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42038

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
vm2 CVE-2026-44000 中危 3.10.5 3.11.0 vm2: vm2: Sandbox escape allows direct interaction with host objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44000

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
vm2 CVE-2026-44002 中危 3.10.5 3.11.0 vm2: vm2: Information disclosure through unsanitized host paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44002

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
vm2 CVE-2026-44003 中危 3.10.5 3.11.0 vm2: vm2: Sandbox escape due to code transformer optimization bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44003

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
vm2 CVE-2026-47141 中危 3.10.5 3.11.4 vm2: vm2: NodeVM observability builtins leak host process and HTTP request data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47141

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 GHSA-2cm2-m3w5-gp2f 中危 3.10.5 3.11.2 vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`

漏洞详情: https://github.com/advisories/GHSA-2cm2-m3w5-gp2f

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-08 16:22 修改: 2026-05-08 16:22
axios CVE-2026-42039 中危 1.13.6 1.15.1, 0.31.1 axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42039

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-08-03 13:18
ws CVE-2026-45736 中危 8.20.0 8.20.1 ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-15 15:16 修改: 2026-08-03 13:18
yaml CVE-2026-33532 中危 1.10.2 2.8.3, 1.10.3 yaml: yaml: Denial of Service via deeply nested YAML document parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33532

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:37
yaml CVE-2026-33532 中危 2.8.1 2.8.3, 1.10.3 yaml: yaml: Denial of Service via deeply nested YAML document parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33532

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:37
body-parser CVE-2026-12590 低危 1.20.3 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
fast-xml-parser CVE-2026-27942 低危 4.2.5 5.3.8, 4.5.4 fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27942

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
hono CVE-2026-44459 低危 4.11.7 4.12.18 Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44459

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
hono GHSA-gq3j-xvxp-8hrf 低危 4.11.7 4.11.10 Hono added timing comparison hardening in basicAuth and bearerAuth

漏洞详情: https://github.com/advisories/GHSA-gq3j-xvxp-8hrf

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-19 20:15 修改: 2026-02-19 20:15
body-parser CVE-2026-12590 低危 2.2.2 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
fast-xml-parser CVE-2026-27942 低危 5.2.5 5.3.8, 4.5.4 fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27942

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
@tootallnate/once CVE-2026-3449 低危 1.1.2 3.0.1, 2.0.1 @tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3449

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-03 05:17 修改: 2026-06-17 10:43
vite CVE-2025-58751 低危 6.2.2 7.1.5, 7.0.7, 6.3.6, 5.4.20 vitejs/vite: lukeed/sirv: Vite middleware may serve files starting with the same name with the public directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58751

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-09-08 23:15 修改: 2026-06-17 09:44
vite CVE-2025-58752 低危 6.2.2 7.1.5, 7.0.7, 6.3.6, 5.4.20 vite: Vite's `server.fs` settings were not applied to HTML files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58752

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-09-08 23:15 修改: 2026-06-17 09:44
next CVE-2026-44572 低危 16.2.4 15.5.16, 16.2.5 next.js: Next.js: Denial of Service due to improper handling of x-nextjs-data header with redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44572

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
qs CVE-2026-2391 低危 6.13.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
next CVE-2026-44582 低危 16.2.4 15.5.16, 16.2.5 Next.js: Next.js: Cache poisoning allows incorrect response delivery

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44582

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
undici CVE-2026-11525 低危 7.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 7.25.0 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
qs CVE-2026-2391 低危 6.14.1 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
axios CVE-2026-42040 低危 1.13.6 1.15.1, 0.31.1 axios: Axios: Incorrect null byte handling can lead to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42040

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
vm2 GHSA-q3fm-4wcw-g57x 低危 3.10.5 3.11.4 vm2 setup-sandbox.js violates Defense Invariant #11 in stack-trace formatter

漏洞详情: https://github.com/advisories/GHSA-q3fm-4wcw-g57x

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-29 17:38 修改: 2026-05-29 17:38
undici CVE-2026-11525 低危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
undici CVE-2026-11525 低危 7.18.2 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 7.18.2 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
app/node_modules/.pnpm/@esbuild+linux-x64@0.25.11/node_modules/@esbuild/linux-x64/bin/esbuild (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:14 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58
stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-01-28 20:16 修改: 2026-08-03 13:16
stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50
stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-06 22:16 修改: 2026-08-03 13:17
stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-02 23:16 修改: 2026-08-03 13:17
stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 02:16 修改: 2026-08-03 13:17
stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 02:16 修改: 2026-08-03 13:17
stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-08-03 13:17
stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-07-24 13:18
stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-08-03 13:18
stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-08-03 13:18
stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28
stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50
stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
golang.org/x/sys CVE-2026-39824 未知 v0.0.0-20220715151400-c0bba94af5f8 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:f9f6e1a2fd44d8a5bba46c4d4554909cff21cb9f73308679d651e43a8536f78e

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×