| fast-xml-parser |
CVE-2026-25896 |
严重 |
4.2.5 |
5.3.5, 4.5.4 |
fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25896
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-20 21:19 修改: 2026-07-21 12:17
|
| fast-xml-parser |
CVE-2026-25896 |
严重 |
5.2.5 |
5.3.5, 4.5.4 |
fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25896
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-20 21:19 修改: 2026-07-21 12:17
|
| form-data |
CVE-2025-7783 |
严重 |
2.3.3 |
2.5.4, 3.0.4, 4.0.4 |
form-data: Unsafe random function in form-data
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7783
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2025-07-18 17:15 修改: 2026-06-17 10:05
|
| i18next-fs-backend |
CVE-2026-48713 |
严重 |
2.6.0 |
2.6.6 |
i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48713
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-15 22:16 修改: 2026-06-17 16:39
|
| protobufjs |
CVE-2026-41242 |
严重 |
7.4.0 |
8.0.1, 7.5.5 |
protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41242
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-18 17:16 修改: 2026-07-15 02:21
|
| shell-quote |
CVE-2026-9277 |
严重 |
1.8.3 |
1.8.4 |
shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9277
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-22 14:16 修改: 2026-08-03 13:18
|
| tar |
CVE-2026-59873 |
严重 |
7.5.13 |
7.5.19 |
tar: node-tar: Denial of Service via crafted gzip bomb
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
|
| brace-expansion |
CVE-2026-13149 |
高危 |
1.1.11 |
5.0.7, 1.1.16, 2.1.2 |
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
|
| brace-expansion |
CVE-2026-14257 |
高危 |
1.1.11 |
5.0.8, 3.0.3, 2.1.3, 1.1.17 |
brace-expansion through 5.0.7 is vulnerable to denial of service via m ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| brace-expansion |
CVE-2026-69152 |
高危 |
1.1.11 |
1.1.18, 2.1.4, 3.0.6, 5.0.9 |
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-08-03 17:16 修改: 2026-08-03 21:16
|
| brace-expansion |
CVE-2026-13149 |
高危 |
2.0.1 |
5.0.7, 1.1.16, 2.1.2 |
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
|
| brace-expansion |
CVE-2026-14257 |
高危 |
2.0.1 |
5.0.8, 3.0.3, 2.1.3, 1.1.17 |
brace-expansion through 5.0.7 is vulnerable to denial of service via m ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| brace-expansion |
CVE-2026-69152 |
高危 |
2.0.1 |
1.1.18, 2.1.4, 3.0.6, 5.0.9 |
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-08-03 17:16 修改: 2026-08-03 21:16
|
| brace-expansion |
CVE-2026-13149 |
高危 |
5.0.5 |
5.0.7, 1.1.16, 2.1.2 |
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
|
| brace-expansion |
CVE-2026-14257 |
高危 |
5.0.5 |
5.0.8, 3.0.3, 2.1.3, 1.1.17 |
brace-expansion through 5.0.7 is vulnerable to denial of service via m ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| brace-expansion |
CVE-2026-69152 |
高危 |
5.0.5 |
1.1.18, 2.1.4, 3.0.6, 5.0.9 |
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-08-03 17:16 修改: 2026-08-03 21:16
|
| fast-uri |
CVE-2026-13676 |
高危 |
3.0.6 |
4.0.1, 3.1.3, 2.4.2 |
fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13676
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-29 14:16 修改: 2026-08-03 13:17
|
| fast-uri |
CVE-2026-16221 |
高危 |
3.0.6 |
2.4.3, 3.1.4, 4.1.1 |
Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-19 15:16 修改: 2026-07-21 18:31
|
| fast-uri |
CVE-2026-18446 |
高危 |
3.0.6 |
2.4.4, 3.1.5, 4.1.2 |
fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forw ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17
|
| fast-uri |
CVE-2026-6321 |
高危 |
3.0.6 |
3.1.1 |
fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6321
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-04 20:16 修改: 2026-07-21 12:19
|
| fast-uri |
CVE-2026-6322 |
高危 |
3.0.6 |
3.1.2 |
fast-uri: fast-uri: URI authority bypass due to improper delimiter handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6322
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-05 11:16 修改: 2026-08-03 13:18
|
| fast-xml-builder |
CVE-2026-44665 |
高危 |
1.1.4 |
1.1.7 |
fast-xml-builder: fast-xml-builder: Attribute injection leading to information disclosure or content manipulation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44665
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:51
|
| @grpc/grpc-js |
CVE-2026-48068 |
高危 |
1.13.0 |
1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 |
grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48068
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-14 20:17 修改: 2026-07-21 16:17
|
| fast-xml-parser |
CVE-2026-26278 |
高危 |
4.2.5 |
4.5.4, 5.3.6 |
fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26278
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-19 20:25 修改: 2026-07-21 12:17
|
| fast-xml-parser |
CVE-2026-33036 |
高危 |
4.2.5 |
5.5.6, 4.5.5 |
fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33036
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-20 06:16 修改: 2026-06-17 10:36
|
| @grpc/grpc-js |
CVE-2026-48069 |
高危 |
1.13.0 |
1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 |
grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48069
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-14 20:17 修改: 2026-07-15 20:23
|
| fast-xml-parser |
CVE-2026-25128 |
高危 |
5.2.5 |
5.3.4 |
fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25128
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-01-30 16:16 修改: 2026-06-17 10:24
|
| fast-xml-parser |
CVE-2026-26278 |
高危 |
5.2.5 |
4.5.4, 5.3.6 |
fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26278
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-19 20:25 修改: 2026-07-21 12:17
|
| fast-xml-parser |
CVE-2026-33036 |
高危 |
5.2.5 |
5.5.6, 4.5.5 |
fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33036
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-20 06:16 修改: 2026-06-17 10:36
|
| flatted |
CVE-2026-32141 |
高危 |
3.3.3 |
3.4.0 |
flatted: flatted: Unbounded recursion DoS in parse() revive phase
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32141
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-12 18:16 修改: 2026-07-17 13:18
|
| flatted |
CVE-2026-33228 |
高危 |
3.3.3 |
3.4.2 |
flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33228
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-20 23:16 修改: 2026-07-15 02:20
|
| axios |
GHSA-gcfj-64vw-6mp9 |
高危 |
1.16.0 |
0.33.0, 1.18.0 |
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
漏洞详情: https://github.com/advisories/GHSA-gcfj-64vw-6mp9
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 22:40 修改: 2026-07-20 22:40
|
| form-data |
CVE-2026-12143 |
高危 |
2.3.3 |
2.5.6, 3.0.5, 4.0.6 |
form-data: form-data: Form field override via CRLF injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-12 19:16 修改: 2026-08-03 13:17
|
| form-data |
CVE-2026-12143 |
高危 |
4.0.4 |
2.5.6, 3.0.5, 4.0.6 |
form-data: form-data: Form field override via CRLF injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-12 19:16 修改: 2026-08-03 13:17
|
| form-data |
CVE-2026-12143 |
高危 |
4.0.5 |
2.5.6, 3.0.5, 4.0.6 |
form-data: form-data: Form field override via CRLF injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-12 19:16 修改: 2026-08-03 13:17
|
| glob |
CVE-2025-64756 |
高危 |
10.4.5 |
11.1.0, 10.5.0 |
glob: glob: Command Injection Vulnerability via Malicious Filenames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
|
| basic-ftp |
CVE-2026-39983 |
高危 |
5.2.0 |
5.2.1 |
basic-ftp: basic-ftp: Command injection via CRLF sequences in file path parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39983
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-09 18:17 修改: 2026-07-15 02:20
|
| i18next-fs-backend |
CVE-2026-41693 |
高危 |
2.6.0 |
2.6.4 |
i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41693
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-08 16:16 修改: 2026-06-17 10:47
|
| ip |
CVE-2024-29415 |
高危 |
1.1.9 |
|
node-ip: Incomplete fix for CVE-2023-42282
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2024-05-27 20:15 修改: 2026-06-17 07:22
|
| ip-address |
CVE-2026-69192 |
高危 |
10.1.0 |
10.3.1 |
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-08-03 20:17 修改: 2026-08-03 20:17
|
| ip-address |
CVE-2026-69192 |
高危 |
10.2.0 |
10.3.1 |
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-08-03 20:17 修改: 2026-08-03 20:17
|
| ip-address |
CVE-2026-69192 |
高危 |
9.0.5 |
10.3.1 |
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-08-03 20:17 修改: 2026-08-03 20:17
|
| js-yaml |
CVE-2026-59869 |
高危 |
4.1.1 |
3.15.0, 4.3.0 |
js-yaml: js-yaml: Denial of Service via crafted YAML documents
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
|
| lodash |
CVE-2026-4800 |
高危 |
4.17.23 |
4.18.0 |
lodash: lodash: Arbitrary code execution via untrusted input in template imports
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-31 20:16 修改: 2026-08-03 13:18
|
| minimatch |
CVE-2026-26996 |
高危 |
9.0.5 |
10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 |
minimatch: minimatch: Denial of Service via specially crafted glob patterns
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
|
| minimatch |
CVE-2026-27903 |
高危 |
9.0.5 |
10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 |
minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
|
| minimatch |
CVE-2026-27904 |
高危 |
9.0.5 |
10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 |
minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
|
| next |
CVE-2026-64641 |
高危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Denial of Service via crafted requests to App Router with Server Actions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64641
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:36
|
| next |
CVE-2026-64642 |
高危 |
16.2.6 |
16.2.11 |
next: Next.js: Authentication bypass leading to unauthorized access
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64642
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:36
|
| next |
CVE-2026-64645 |
高危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Server-Side Request Forgery vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64645
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:39
|
| next |
CVE-2026-64649 |
高危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64649
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 20:16 修改: 2026-07-29 14:38
|
| basic-ftp |
CVE-2026-41324 |
高危 |
5.2.0 |
5.3.0 |
basic-ftp: basic-ftp: Denial of Service via unbounded memory growth from malicious directory listings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41324
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-24 04:16 修改: 2026-06-17 10:46
|
| protobufjs |
CVE-2026-44289 |
高危 |
7.4.0 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44289
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-07-27 13:18
|
| protobufjs |
CVE-2026-44290 |
高危 |
7.4.0 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Denial of Service via crafted schema
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44290
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44291 |
高危 |
7.4.0 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44291
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44293 |
高危 |
7.4.0 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44293
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-08-03 13:18
|
| protobufjs |
CVE-2026-48712 |
高危 |
7.4.0 |
7.6.1, 8.4.1 |
protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
|
| sharp |
GHSA-f88m-g3jw-g9cj |
高危 |
0.34.5 |
0.35.0 |
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591
漏洞详情: https://github.com/advisories/GHSA-f88m-g3jw-g9cj
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-21 22:07 修改: 2026-07-21 22:07
|
| basic-ftp |
CVE-2026-44240 |
高危 |
5.2.0 |
5.3.1 |
basic-ftp: basic-ftp: Client-side Denial of Service via unterminated multiline FTP responses
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44240
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-12 21:16 修改: 2026-06-17 10:50
|
| shell-quote |
CVE-2026-13311 |
高危 |
1.8.3 |
1.9.0 |
shell-quote: shell-quote/parse: shell-quote: Denial of Service due to inefficient input parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13311
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-25 05:16 修改: 2026-06-26 19:03
|
| sigstore |
CVE-2026-48815 |
高危 |
4.1.0 |
4.1.1 |
sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
|
| basic-ftp |
GHSA-6v7q-wjvx-w8wg |
高危 |
5.2.0 |
5.2.2 |
basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands
漏洞详情: https://github.com/advisories/GHSA-6v7q-wjvx-w8wg
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-10 20:18 修改: 2026-04-10 20:18
|
| tar |
CVE-2026-59874 |
高危 |
7.5.13 |
7.5.18 |
tar: Node-tar: Denial of Service via malformed tar archive header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
|
| undici |
CVE-2026-12151 |
高危 |
6.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-06-17 17:16 修改: 2026-07-30 12:17
|
| undici |
CVE-2026-12151 |
高危 |
7.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 17:16 修改: 2026-07-30 12:17
|
| undici |
CVE-2026-13697 |
高危 |
7.25.0 |
7.29.0, 8.9.0 |
undici's cache interceptor mishandles malformed Cache-Control private ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-6734 |
高危 |
7.25.0 |
7.28.0, 8.2.0 |
undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6734
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 18:18 修改: 2026-08-03 13:18
|
| undici |
CVE-2026-9697 |
高危 |
7.25.0 |
7.28.0, 8.5.0 |
undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9697
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 18:18 修改: 2026-07-30 12:19
|
| undici |
CVE-2026-13697 |
高危 |
7.28.0 |
7.29.0, 8.9.0 |
undici's cache interceptor mishandles malformed Cache-Control private ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
|
| ws |
CVE-2026-48779 |
高危 |
8.20.0 |
5.2.5, 6.2.4, 7.5.11, 8.21.0 |
ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 13:20 修改: 2026-08-03 13:18
|
| brace-expansion |
CVE-2026-45149 |
中危 |
5.0.5 |
5.0.6 |
brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
|
| dompurify |
CVE-2026-49458 |
中危 |
3.4.2 |
3.4.6 |
dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49458
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:47
|
| dompurify |
CVE-2026-49459 |
中危 |
3.4.2 |
3.4.6 |
dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49459
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:51
|
| dompurify |
CVE-2026-49978 |
中危 |
3.4.2 |
3.4.7 |
dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49978
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:49
|
| ip-address |
CVE-2026-42338 |
中危 |
10.1.0 |
10.1.1 |
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-05-12 20:16 修改: 2026-08-03 13:18
|
| dompurify |
CVE-2026-65898 |
中危 |
3.4.2 |
3.4.11 |
DOMPurify before 3.4.11 fails to clone the ALLOWED_ATTR allowlist when ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
|
| ip-address |
CVE-2026-54272 |
中危 |
10.2.0 |
10.2.1 |
ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
|
| ip-address |
CVE-2026-69198 |
中危 |
10.2.0 |
10.2.2 |
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-08-03 20:17 修改: 2026-08-03 20:17
|
| dompurify |
CVE-2026-65902 |
中危 |
3.4.2 |
3.4.7 |
DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct refe ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65902
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
|
| ip-address |
CVE-2026-42338 |
中危 |
9.0.5 |
10.1.1 |
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-12 20:16 修改: 2026-08-03 13:18
|
| echarts |
CVE-2026-45249 |
中危 |
5.4.1 |
6.1.0 |
Apache ECharts has a cross-site scripting (XSS) vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45249
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-25 08:16 修改: 2026-07-23 17:10
|
| js-yaml |
CVE-2026-53550 |
中危 |
4.1.1 |
4.2.0, 3.15.0 |
js-yaml: js-yaml: Denial of Service via crafted YAML merge keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
|
| axios |
GHSA-jqh4-m9w3-8hp9 |
中危 |
1.16.0 |
1.18.0 |
Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`
漏洞详情: https://github.com/advisories/GHSA-jqh4-m9w3-8hp9
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 22:27 修改: 2026-07-20 22:27
|
| lodash |
CVE-2026-2950 |
中危 |
4.17.23 |
4.18.0 |
lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
|
| mdast-util-to-hast |
CVE-2025-66400 |
中危 |
13.2.0 |
13.2.1 |
mdast-util-to-hast: mdast-util-to-hast: Markdown code elements can appear as regular page content
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66400
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2025-12-01 23:15 修改: 2026-06-17 09:56
|
| axios |
GHSA-mmx7-hfxf-jppx |
中危 |
1.16.0 |
1.18.0, 0.33.0 |
Axios: Prototype pollution gadgets can alter axios request construction
漏洞详情: https://github.com/advisories/GHSA-mmx7-hfxf-jppx
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 22:25 修改: 2026-07-20 22:25
|
| axios |
GHSA-mwf2-3pr3-8698 |
中危 |
1.16.0 |
1.18.0 |
Axios: HTTP/2 streamed uploads bypass `maxBodyLength`
漏洞详情: https://github.com/advisories/GHSA-mwf2-3pr3-8698
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
|
| axios |
GHSA-pmv8-rq9r-6j72 |
中危 |
1.16.0 |
0.33.0, 1.18.0 |
Axios: Deep formToJSON Key Recursion Can Cause Denial of Service
漏洞详情: https://github.com/advisories/GHSA-pmv8-rq9r-6j72
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 17:48 修改: 2026-07-20 17:48
|
| mongoose |
GHSA-664h-wqgq-64gw |
中危 |
8.23.1 |
6.13.10, 7.8.10, 8.24.1, 9.7.2 |
Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)
漏洞详情: https://github.com/advisories/GHSA-664h-wqgq-64gw
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-24 16:22 修改: 2026-07-24 16:22
|
| axios |
GHSA-xj6q-8x83-jv6g |
中危 |
1.16.0 |
1.18.0 |
Axios: Prototype pollution auth subfields can inject Basic auth
漏洞详情: https://github.com/advisories/GHSA-xj6q-8x83-jv6g
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 17:51 修改: 2026-07-20 17:51
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.5.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @protobufjs/utf8 |
CVE-2026-44288 |
中危 |
1.1.0 |
1.1.1 |
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| next |
CVE-2026-64643 |
中危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Information disclosure via Server Action ID exposure
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64643
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:37
|
| next |
CVE-2026-64644 |
中危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Denial of Service via malicious image optimization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64644
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 18:16 修改: 2026-07-29 14:39
|
| next |
CVE-2026-64646 |
中危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Denial of Service via excessive memory consumption in Server Actions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64646
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 19:17 修改: 2026-07-29 14:39
|
| next |
CVE-2026-64647 |
中危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Information disclosure via server-side request caching
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64647
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 19:17 修改: 2026-07-29 14:38
|
| next |
CVE-2026-64648 |
中危 |
16.2.6 |
15.5.21, 16.2.11 |
next: Next.js: Information disclosure via server-side fetch cache
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64648
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-27 20:16 修改: 2026-07-29 14:38
|
| prismjs |
CVE-2024-53382 |
中危 |
1.27.0 |
1.30.0 |
prismjs: DOM Clobbering vulnerability within the Prism library's prism-autoloader plugin
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53382
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2025-03-03 07:15 修改: 2026-06-17 08:08
|
| @sigstore/core |
CVE-2026-48758 |
中危 |
3.2.0 |
3.2.1 |
sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
|
| fast-xml-parser |
CVE-2026-33349 |
中危 |
4.2.5 |
4.5.5, 5.5.7 |
fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33349
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-24 20:16 修改: 2026-06-17 10:37
|
| fast-xml-parser |
CVE-2026-41650 |
中危 |
4.2.5 |
5.7.0 |
fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
|
| @sigstore/verify |
CVE-2026-48816 |
中危 |
3.1.0 |
3.1.1 |
sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
|
| ajv |
CVE-2025-69873 |
中危 |
6.12.6 |
8.18.0, 6.14.0 |
ajv: ReDoS via $data reference
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-11 19:15 修改: 2026-08-03 13:17
|
| ajv |
CVE-2025-69873 |
中危 |
7.2.4 |
8.18.0, 6.14.0 |
ajv: ReDoS via $data reference
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-11 19:15 修改: 2026-08-03 13:17
|
| protobufjs |
CVE-2026-44288 |
中危 |
7.4.0 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44292 |
中危 |
7.4.0 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Data integrity impact due to prototype pollution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44292
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44294 |
中危 |
7.4.0 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44294
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-45740 |
中危 |
7.4.0 |
7.5.8, 8.2.0 |
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
|
| protobufjs |
CVE-2026-54269 |
中危 |
7.4.0 |
7.6.3, 8.6.0 |
protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
|
| qs |
CVE-2025-15284 |
中危 |
6.5.3 |
6.14.1 |
qs: qs: Denial of Service via improper input validation in array parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
|
| request |
CVE-2023-28155 |
中危 |
2.88.2 |
|
request: bypass of SSRF mitigations when following a cross-protocol redirect
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28155
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2023-03-16 15:15 修改: 2026-06-17 05:46
|
| brace-expansion |
CVE-2026-33750 |
中危 |
1.1.11 |
5.0.5, 3.0.2, 2.0.3, 1.1.13 |
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
|
| fast-xml-parser |
CVE-2026-33349 |
中危 |
5.2.5 |
4.5.5, 5.5.7 |
fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33349
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-24 20:16 修改: 2026-06-17 10:37
|
| fast-xml-parser |
CVE-2026-41650 |
中危 |
5.2.5 |
5.7.0 |
fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
|
| fast-xml-parser |
CVE-2026-41650 |
中危 |
5.5.8 |
5.7.0 |
fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
|
| file-type |
CVE-2026-31808 |
中危 |
21.3.0 |
21.3.1 |
file-type: file-type: Denial of Service due to infinite loop in ASF file parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31808
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-10 21:16 修改: 2026-06-17 10:34
|
| file-type |
CVE-2026-32630 |
中危 |
21.3.0 |
21.3.2 |
file-type: file-type: Denial of Service via excessive memory growth from crafted ZIP files
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32630
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
|
| tar |
CVE-2026-53655 |
中危 |
7.5.13 |
7.5.16 |
node-tar: node-tar: File smuggling due to inconsistent tar archive parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
|
| tar |
CVE-2026-59871 |
中危 |
7.5.13 |
7.5.18 |
node-tar: node-tar: Denial of Service due to incorrect PAX path handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
|
| tar |
CVE-2026-59875 |
中危 |
7.5.13 |
7.5.17 |
node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
|
| tar |
GHSA-r292-9mhp-454m |
中危 |
7.5.13 |
7.5.21 |
node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
|
| tough-cookie |
CVE-2023-26136 |
中危 |
2.5.0 |
4.1.3 |
tough-cookie: prototype pollution in cookie memstore
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26136
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2023-07-01 05:15 修改: 2026-06-17 05:42
|
| ajv |
CVE-2025-69873 |
中危 |
8.17.1 |
8.18.0, 6.14.0 |
ajv: ReDoS via $data reference
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-11 19:15 修改: 2026-08-03 13:17
|
| undici |
CVE-2026-15157 |
中危 |
6.25.0 |
6.28.0, 7.29.0, 8.9.0 |
undici does not validate the type property of a duck-typed blob-like r ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-16728 |
中危 |
6.25.0 |
6.28.0, 7.29.0, 8.9.0 |
undici's retry interceptor can deliver a response whose body length do ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-29 21:17 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-16729 |
中危 |
6.25.0 |
6.28.0, 7.29.0, 8.9.0 |
undici's setCookie function does not fully sanitize cookie attributes. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-9679 |
中危 |
6.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.0.1 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| axios |
GHSA-42h9-826w-cgv3 |
中危 |
1.16.0 |
0.33.0, 1.18.0 |
Axios: Excessive recursion in formDataToJSON can cause denial of service
漏洞详情: https://github.com/advisories/GHSA-42h9-826w-cgv3
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 17:58 修改: 2026-07-20 17:58
|
| brace-expansion |
CVE-2026-33750 |
中危 |
2.0.1 |
5.0.5, 3.0.2, 2.0.3, 1.1.13 |
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
|
| axios |
GHSA-7q8q-rj6j-mhjq |
中危 |
1.16.0 |
0.33.0, 1.18.0 |
Axios: Nested axios option objects can consume polluted prototype values
漏洞详情: https://github.com/advisories/GHSA-7q8q-rj6j-mhjq
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
|
| undici |
CVE-2026-14643 |
中危 |
7.25.0 |
7.29.0, 8.9.0 |
undici's cache interceptor mishandles optional whitespace placed aroun ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-15157 |
中危 |
7.25.0 |
6.28.0, 7.29.0, 8.9.0 |
undici does not validate the type property of a duck-typed blob-like r ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-16728 |
中危 |
7.25.0 |
6.28.0, 7.29.0, 8.9.0 |
undici's retry interceptor can deliver a response whose body length do ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 21:17 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-16729 |
中危 |
7.25.0 |
6.28.0, 7.29.0, 8.9.0 |
undici's setCookie function does not fully sanitize cookie attributes. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-9678 |
中危 |
7.25.0 |
7.28.0, 8.5.0 |
undici: Undici: Information disclosure due to improper cache-control header parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
|
| undici |
CVE-2026-9679 |
中危 |
7.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| axios |
GHSA-f4gw-2p7v-4548 |
中危 |
1.16.0 |
1.18.0, 0.33.0 |
Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios
漏洞详情: https://github.com/advisories/GHSA-f4gw-2p7v-4548
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 22:20 修改: 2026-07-20 22:20
|
| undici |
CVE-2026-14643 |
中危 |
7.28.0 |
7.29.0, 8.9.0 |
undici's cache interceptor mishandles optional whitespace placed aroun ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-15157 |
中危 |
7.28.0 |
6.28.0, 7.29.0, 8.9.0 |
undici does not validate the type property of a duck-typed blob-like r ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 22:16 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-16728 |
中危 |
7.28.0 |
6.28.0, 7.29.0, 8.9.0 |
undici's retry interceptor can deliver a response whose body length do ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 21:17 修改: 2026-07-30 16:43
|
| undici |
CVE-2026-16729 |
中危 |
7.28.0 |
6.28.0, 7.29.0, 8.9.0 |
undici's setCookie function does not fully sanitize cookie attributes. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-29 17:16 修改: 2026-07-30 16:43
|
| unhead |
CVE-2026-31860 |
中危 |
1.11.20 |
2.1.11 |
Unhead has XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31860
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-12 18:16 修改: 2026-06-17 10:34
|
| unhead |
CVE-2026-39315 |
中危 |
1.11.20 |
2.1.13 |
Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39315
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-09 18:17 修改: 2026-06-17 10:41
|
| uuid |
CVE-2026-41907 |
中危 |
3.4.0 |
11.1.1, 12.0.1, 13.0.1 |
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
|
| uuid |
CVE-2026-41907 |
中危 |
8.3.2 |
11.1.1, 12.0.1, 13.0.1 |
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
|
| uuid |
CVE-2026-41907 |
中危 |
9.0.1 |
11.1.1, 12.0.1, 13.0.1 |
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
|
| axios |
GHSA-hcpx-6fm6-wx23 |
中危 |
1.16.0 |
0.33.0, 1.18.0 |
Axios form serializer maxDepth bypass via {} metatoken
漏洞详情: https://github.com/advisories/GHSA-hcpx-6fm6-wx23
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-20 22:38 修改: 2026-07-20 22:38
|
| ws |
CVE-2026-45736 |
中危 |
8.20.0 |
8.20.1 |
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-05-15 15:16 修改: 2026-08-03 13:18
|
| yaml |
CVE-2026-33532 |
中危 |
2.8.0 |
2.8.3, 1.10.3 |
yaml: yaml: Denial of Service via deeply nested YAML document parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33532
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:37
|
| undici |
CVE-2026-6733 |
低危 |
6.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| brace-expansion |
CVE-2025-5889 |
低危 |
1.1.11 |
2.0.2, 1.1.12, 3.0.1, 4.0.1 |
brace-expansion: juliangruber brace-expansion index.js expand redos
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
|
| brace-expansion |
CVE-2025-5889 |
低危 |
2.0.1 |
2.0.2, 1.1.12, 3.0.1, 4.0.1 |
brace-expansion: juliangruber brace-expansion index.js expand redos
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
|
| dompurify |
CVE-2026-65899 |
低危 |
3.4.2 |
3.4.9 |
DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:53
|
| fast-xml-parser |
CVE-2026-27942 |
低危 |
5.2.5 |
5.3.8, 4.5.4 |
fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27942
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
|
| dompurify |
CVE-2026-65900 |
低危 |
3.4.2 |
3.4.8 |
DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65900
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
|
| fast-xml-parser |
CVE-2026-27942 |
低危 |
4.2.5 |
5.3.8, 4.5.4 |
fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27942
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
|
| unhead |
CVE-2026-31873 |
低危 |
1.11.20 |
2.1.11 |
Unhead Vulnerable to Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31873
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-12 18:16 修改: 2026-06-17 10:34
|
| dompurify |
CVE-2026-65901 |
低危 |
3.4.2 |
|
DOMPurify through 3.4.6 contains a cross-site scripting vulnerability ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65901
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
|
| dompurify |
GHSA-c2j3-45gr-mqc4 |
低危 |
3.4.2 |
3.4.12 |
DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.
漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
|
| @tootallnate/once |
CVE-2026-3449 |
低危 |
1.1.2 |
3.0.1, 2.0.1 |
@tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3449
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-03-03 05:17 修改: 2026-06-17 10:43
|
| undici |
CVE-2026-11525 |
低危 |
6.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:6966e360c462d50cda6c02920293f497cf6c749d0a3149307c9088a33530860f
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| undici |
CVE-2026-11525 |
低危 |
7.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| undici |
CVE-2026-6733 |
低危 |
7.25.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:4a79a08805b2aefc1d091983f584971ab732f21974d9a1c13f1566e3602ee92b
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|