ghcr.io/lakr233/assppweb:latest linux/amd64

ghcr.io/lakr233/assppweb:latest - Trivy安全扫描结果 扫描时间: 2026-09-13 11:55
全部漏洞信息
低危漏洞:40 中危漏洞:43 高危漏洞:55 严重漏洞:2

系统OS: alpine 3.23.4 扫描引擎: Trivy 扫描时间: 2026-09-13 11:55

ghcr.io/lakr233/assppweb:latest (alpine 3.23.4) (alpine)
低危漏洞:32 中危漏洞:14 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-14456 高危 3.5.6-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-09-11 13:18
libssl3 CVE-2026-14456 高危 3.5.6-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-09-11 13:18
libcrypto3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-63072 中危 3.5.6-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63076 中危 3.5.6-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-18798 中危 3.5.6-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-18798 中危 3.5.6-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-63072 中危 3.5.6-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63076 中危 3.5.6-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-54874 低危 3.5.6-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63073 低危 3.5.6-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63074 低危 3.5.6-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63075 低危 3.5.6-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-75803 低危 3.5.6-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-14457 低危 3.5.6-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
libcrypto3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-14457 低危 3.5.6-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
libssl3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-54874 低危 3.5.6-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63073 低危 3.5.6-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63074 低危 3.5.6-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63075 低危 3.5.6-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-75803 低危 3.5.6-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
Node.js (node-pkg)
低危漏洞:8 中危漏洞:29 高危漏洞:51 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
vitest CVE-2026-47429 严重 4.0.18 4.1.0, 3.2.6 vitest: Vitest: Arbitrary code execution and information disclosure via path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47429

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-14 20:17 修改: 2026-08-06 18:25
@xmldom/xmldom CVE-2026-41673 高危 0.8.11 0.8.13, 0.9.10 @xmldom/xmldom: xmldom: xmldom: Denial of Service via deeply nested XML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41673

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-05-07 04:16 修改: 2026-08-28 16:17
@xmldom/xmldom CVE-2026-41674 高危 0.8.11 0.8.13, 0.9.10 xmldom: xmldom: Arbitrary XML markup injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41674

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-05-07 04:16 修改: 2026-09-10 13:20
@xmldom/xmldom CVE-2026-41675 高危 0.8.11 0.8.13, 0.9.10 xmldom: xmldom: Arbitrary XML node injection via crafted processing instructions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41675

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-05-07 04:16 修改: 2026-08-28 16:17
@xmldom/xmldom CVE-2026-83605 高危 0.8.11 0.9.11, 0.8.14 xmldom: @xmldom/xmldom: xmldom: Attribute injection allows client-side script execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83605

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
@xmldom/xmldom CVE-2026-83607 高危 0.8.11 0.9.11, 0.8.14 xmldom: xmldom: Cross-site scripting via unvalidated element name injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83607

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
@xmldom/xmldom CVE-2026-83608 高危 0.8.11 0.8.15, 0.9.12 xmldom: @xmldom/xmldom: xmldom: XML Markup Injection via DocType Name Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83608

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
@xmldom/xmldom CVE-2026-83613 高危 0.8.11 0.8.15, 0.9.12 xmldom: @xmldom/xmldom: xmldom: Denial of Service due to quadratic-time attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83613

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
@xmldom/xmldom CVE-2026-83614 高危 0.8.11 0.8.15, 0.9.12 xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic-time XML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83614

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
@xmldom/xmldom CVE-2026-83615 高危 0.8.11 0.8.15, 0.9.12 xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic memory consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83615

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
@xmldom/xmldom CVE-2026-83616 高危 0.8.11 0.8.15, 0.9.12 xmldom: xmldom: XML Structure Injection via Unvalidated Processing Instruction Targets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83616

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
@xmldom/xmldom CVE-2026-83619 高危 0.8.11 0.8.15 @xmldom/xmldom: xmldom: Denial of Service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83619

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
adm-zip CVE-2026-39244 高危 0.5.16 0.6.0 adm-zip: adm-zip: Denial of Service via crafted ZIP file leading to excessive memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39244

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-10 17:16 修改: 2026-07-10 19:17
brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
form-data CVE-2026-12143 高危 4.0.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-12 19:16 修改: 2026-09-11 13:17
glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-08-03 20:17 修改: 2026-09-10 20:30
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
nanoid CVE-2026-67213 高危 3.3.11 3.3.18, 5.1.6 nanoid: nanoid: Denial of Service via infinite loop in random ID generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-29 14:16 修改: 2026-08-18 14:26
nanoid CVE-2026-67214 高危 3.3.11 3.3.16, 5.1.16 nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67214

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-29 14:16 修改: 2026-08-26 17:53
nanoid CVE-2026-73086 高危 3.3.11 3.3.12, 5.1.11 nanoid: nanoid: Predictable ID generation due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73086

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-08-11 17:19 修改: 2026-09-09 20:46
pacote CVE-2026-9496 高危 18.0.6 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10
path-to-regexp CVE-2026-4867 高危 0.1.12 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
picomatch CVE-2026-33671 高危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
postcss CVE-2026-45623 高危 8.5.6 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13
postcss CVE-2026-73646 高危 8.5.6 8.5.18 postcss: PostCSS: Information disclosure via path traversal in source map auto-loading

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73646

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-08-17 16:17 修改: 2026-08-17 17:16
rollup CVE-2026-27606 高危 4.57.1 2.80.0, 3.30.0, 4.59.0 rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27606

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-02-25 03:16 修改: 2026-09-10 13:18
sigstore CVE-2026-48815 高危 2.3.1 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
@xmldom/xmldom CVE-2026-34601 高危 0.8.11 0.8.12, 0.9.9 xmldom: xmldom: XML structure injection via CDATA terminator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34601

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-04-02 18:16 修改: 2026-07-21 19:10
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-01-16 22:16 修改: 2026-09-07 13:18
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-01-20 01:15 修改: 2026-08-24 13:17
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-01-28 01:16 修改: 2026-09-07 13:18
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-03-07 16:15 修改: 2026-09-01 13:18
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 6.2.1 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
undici CVE-2026-12151 高危 7.21.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-17 17:16 修改: 2026-09-11 13:17
undici CVE-2026-13697 高危 7.21.0 7.29.0, 8.9.0 undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-29 17:16 修改: 2026-08-04 14:17
undici CVE-2026-1526 高危 7.21.0 6.24.0, 7.24.0 undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1526

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-12 21:16 修改: 2026-09-04 13:18
undici CVE-2026-1528 高危 7.21.0 6.24.0, 7.24.0 undici: undici: Denial of Service via crafted WebSocket frame with large length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1528

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-12 21:16 修改: 2026-09-04 13:18
undici CVE-2026-2229 高危 7.21.0 6.24.0, 7.24.0 undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2229

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-12 21:16 修改: 2026-09-04 13:18
vite CVE-2026-39363 高危 7.3.1 8.0.5, 7.3.2, 6.4.2 Vite: Vite: Information disclosure via WebSocket connection bypasses access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39363

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-04-07 20:16 修改: 2026-08-25 13:18
vite CVE-2026-39364 高危 7.3.1 8.0.5, 7.3.2 vite: Vite: Information disclosure via query parameter manipulation on the development server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39364

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-04-07 20:16 修改: 2026-08-04 13:18
vite CVE-2026-53571 高危 7.3.1 8.0.16, 7.3.5, 6.4.3 vite: `server.fs.deny` bypass on Windows alternate paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53571

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:44
@xmldom/xmldom CVE-2026-41672 高危 0.8.11 0.8.13, 0.9.10 xmldom: @xmldom/xmldom: xmldom: Arbitrary XML Node Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41672

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-05-07 04:16 修改: 2026-08-28 16:17
ws CVE-2026-48779 高危 8.19.0 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-17 13:20 修改: 2026-09-11 13:18
postcss CVE-2026-69153 中危 8.5.6 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
qs CVE-2026-82417 中危 6.14.1 6.16.0 qs: qs: Denial of Service via improper validation in stringify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
qs CVE-2026-8723 中危 6.14.1 6.15.2 qs: qs: Denial of Service due to improper handling of null/undefined array elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
@sigstore/core CVE-2026-48758 中危 1.1.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
@xmldom/xmldom CVE-2026-83610 中危 0.8.11 0.8.15, 0.9.12 xmldom: @xmldom/xmldom: xmldom: XML fragment injection via invalid EntityReference serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83610

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-05-12 20:16 修改: 2026-09-11 13:17
@xmldom/xmldom CVE-2026-83611 中危 0.8.11 0.8.15, 0.9.12 xmldom: xmldom: Malformed XML end tag parsing leads to content discard and security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83611

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
undici CVE-2026-14643 中危 7.21.0 7.29.0, 8.9.0 undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:53
undici CVE-2026-15157 中危 7.21.0 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici CVE-2026-1525 中危 7.21.0 6.24.0, 7.24.0 undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1525

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-12 20:16 修改: 2026-06-17 10:15
undici CVE-2026-1527 中危 7.21.0 6.24.0, 7.24.0 undici: Undici: HTTP header injection and request smuggling vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1527

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-12 21:16 修改: 2026-06-17 10:16
undici CVE-2026-16728 中危 7.21.0 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici CVE-2026-16729 中危 7.21.0 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici CVE-2026-2581 中危 7.21.0 7.24.0 undici: Undici: Denial of Service due to uncontrolled resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2581

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-12 21:16 修改: 2026-06-17 10:31
undici CVE-2026-9678 中危 7.21.0 7.28.0, 8.5.0 undici: Undici: Information disclosure due to improper cache-control header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
undici CVE-2026-9679 中危 7.21.0 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
uuid CVE-2026-41907 中危 11.1.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
picomatch CVE-2026-33672 中危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
@vitest/mocker CVE-2026-84373 中危 4.0.18 4.1.11, 5.0.0-rc.2 vitest: Vitest: Arbitrary File Read via Path Traversal in HMR WebSocket

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84373

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 22:17 修改: 2026-09-09 21:09
vite CVE-2026-39365 中危 7.3.1 8.0.5, 7.3.2, 6.4.2 vite: Vite: Information disclosure via path traversal in dev server's .map request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39365

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-04-07 20:16 修改: 2026-07-24 21:10
vite CVE-2026-53632 中危 7.3.1 8.0.16, 7.3.5, 6.4.3 launch-editor: launch-editor: Credential compromise via NTLMv2 password hash leak through UNC path access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53632

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-22 18:16 修改: 2026-06-23 15:44
adm-zip CVE-2026-76845 中危 0.5.16 adm-zip: adm-zip: Arbitrary File Overwrite via Symlink Following

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76845

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-08-24 14:17 修改: 2026-08-24 17:18
vitest CVE-2026-84373 中危 4.0.18 4.1.11, 5.0.0-rc.2 vitest: Vitest: Arbitrary File Read via Path Traversal in HMR WebSocket

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84373

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-09-01 22:17 修改: 2026-09-09 21:09
postcss CVE-2026-41305 中危 8.5.6 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
ws CVE-2026-45736 中危 8.19.0 8.20.1 ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-05-15 15:16 修改: 2026-09-11 13:18
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
body-parser CVE-2026-12590 低危 1.20.4 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
postcss-selector-parser CVE-2026-9358 低危 6.1.0 6.1.3, 7.1.3 postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9358

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-05-24 06:16 修改: 2026-07-23 11:10
diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:4983b93ee7967564f02cbf6162b75010ce557404a539fba05ee19a0eae01acbc

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
undici CVE-2026-11525 低危 7.21.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 7.21.0 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
esbuild GHSA-g7r4-m6w7-qqqr 低危 0.27.3 0.28.1 esbuild allows arbitrary file read when running the development server on Windows

漏洞详情: https://github.com/advisories/GHSA-g7r4-m6w7-qqqr

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-06-12 20:08 修改: 2026-06-12 20:08
qs CVE-2026-2391 低危 6.14.1 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:97242632f1cba3955c6e61c187352492d55812b797708c4ef1bd851f683cf722

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×