ghcr.io/le-shi/gitea-runner:3.0-offline-amd64 linux/amd64

ghcr.io/le-shi/gitea-runner:3.0-offline-amd64 - Trivy安全扫描结果 扫描时间: 2026-08-19 01:48
全部漏洞信息
低危漏洞:1035 中危漏洞:2801 高危漏洞:1930 严重漏洞:75

系统OS: debian 12.15 扫描引擎: Trivy 扫描时间: 2026-08-19 01:48

ghcr.io/le-shi/gitea-runner:3.0-offline-amd64 (debian 12.15) (debian)
低危漏洞:823 中危漏洞:1343 高危漏洞:217 严重漏洞:21
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libperl5.36 CVE-2026-13221 严重 5.36.0-7+deb12u3 Perl versions through 5.43.9 produce silently incorrect regular expres ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

libperl5.36 CVE-2026-42496 严重 5.36.0-7+deb12u3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

libperl5.36 CVE-2026-57433 严重 5.36.0-7+deb12u3 Storable versions before 3.41 for Perl have a signed integer overflow ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

libperl5.36 CVE-2026-8376 严重 5.36.0-7+deb12u3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10

libsqlite3-0 CVE-2025-7458 严重 3.40.1-2+deb12u2 sqlite: SQLite integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-29 13:15 修改: 2026-06-17 10:04

linux-libc-dev CVE-2026-43185 严重 6.1.180-1 kernel: ksmbd: fix signededness bug in smb_direct_prepare_negotiation()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43185

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

openssh-client CVE-2026-60002 严重 1:9.2p1-2+deb12u10 openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60002

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:36

perl CVE-2026-13221 严重 5.36.0-7+deb12u3 Perl versions through 5.43.9 produce silently incorrect regular expres ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

perl CVE-2026-42496 严重 5.36.0-7+deb12u3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl CVE-2026-57433 严重 5.36.0-7+deb12u3 Storable versions before 3.41 for Perl have a signed integer overflow ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl CVE-2026-8376 严重 5.36.0-7+deb12u3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10

perl-base CVE-2026-13221 严重 5.36.0-7+deb12u3 Perl versions through 5.43.9 produce silently incorrect regular expres ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

perl-base CVE-2026-42496 严重 5.36.0-7+deb12u3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl-base CVE-2026-57433 严重 5.36.0-7+deb12u3 Storable versions before 3.41 for Perl have a signed integer overflow ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl-base CVE-2026-8376 严重 5.36.0-7+deb12u3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10

perl-modules-5.36 CVE-2026-13221 严重 5.36.0-7+deb12u3 Perl versions through 5.43.9 produce silently incorrect regular expres ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

perl-modules-5.36 CVE-2026-42496 严重 5.36.0-7+deb12u3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl-modules-5.36 CVE-2026-57433 严重 5.36.0-7+deb12u3 Storable versions before 3.41 for Perl have a signed integer overflow ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl-modules-5.36 CVE-2026-8376 严重 5.36.0-7+deb12u3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10

zlib1g CVE-2023-45853 严重 1:1.2.13.dfsg-1 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-10-14 02:15 修改: 2026-07-14 13:17

zlib1g-dev CVE-2023-45853 严重 1:1.2.13.dfsg-1 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-10-14 02:15 修改: 2026-07-14 13:17

libexpat1 CVE-2025-59375 高危 2.5.0-1+deb12u2 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46

libexpat1 CVE-2026-25210 高危 2.5.0-1+deb12u2 libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24

libexpat1 CVE-2026-45186 高危 2.5.0-1+deb12u2 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10

libexpat1 CVE-2026-56408 高危 2.5.0-1+deb12u2 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27

libldap-2.5-0 CVE-2023-2953 高危 2.5.13+dfsg-5 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53

libmount1 CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libncurses-dev CVE-2025-69720 高危 6.4-4 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libncurses6 CVE-2025-69720 高危 6.4-4 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libncursesw6 CVE-2025-69720 高危 6.4-4 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

bsdutils CVE-2026-53615 高危 1:2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-12064 高危 7.88.1-10+deb12u15 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

curl CVE-2026-6276 高危 7.88.1-10+deb12u15 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-8286 高危 7.88.1-10+deb12u15 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

libperl5.36 CVE-2026-42497 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

libperl5.36 CVE-2026-48962 高危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

libperl5.36 CVE-2026-57432 高危 5.36.0-7+deb12u3 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

libperl5.36 CVE-2026-9538 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

libsmartcols1 CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8458 高危 7.88.1-10+deb12u15 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12

libssh2-1 CVE-2026-58050 高危 1.10.0-3+b1 libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58050

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-28 02:16 修改: 2026-06-30 20:27

libssh2-1 CVE-2026-7598 高危 1.10.0-3+b1 libssh2: integer overflow via large username or password arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7598

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 22:16 修改: 2026-07-15 01:17

libssl-dev CVE-2026-14456 高危 3.0.20-1~deb12u2 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:17

libssl3 CVE-2026-14456 高危 3.0.20-1~deb12u2 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:17

libtinfo6 CVE-2025-69720 高危 6.4-4 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libuuid1 CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8927 高危 7.88.1-10+deb12u15 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21

linux-libc-dev CVE-2013-7445 高危 6.1.180-1 kernel: memory exhaustion via crafted Graphics Execution Manager (GEM) objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7445

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2015-10-16 01:59 修改: 2026-05-06 22:30

linux-libc-dev CVE-2019-19449 高危 6.1.180-1 kernel: mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19449

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-12-08 02:15 修改: 2026-06-17 02:26

linux-libc-dev CVE-2019-19814 高危 6.1.180-1 kernel: out-of-bounds write in __remove_dirty_segment in fs/f2fs/segment.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19814

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-12-17 06:15 修改: 2026-06-17 02:27

linux-libc-dev CVE-2021-3847 高危 6.1.180-1 kernel: low-privileged user privileges escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3847

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:05

linux-libc-dev CVE-2021-3864 高危 6.1.180-1 kernel: descendant's dumpable setting with certain SUID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-08-26 16:15 修改: 2026-06-17 04:05

linux-libc-dev CVE-2023-52452 高危 6.1.180-1 kernel: bpf: Fix accesses to uninit stack slots

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52452

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-22 17:15 修改: 2026-06-17 06:42

linux-libc-dev CVE-2023-52586 高危 6.1.180-1 kernel: drm/msm/dpu: Add mutex lock in control vblank irq

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52586

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-06 07:15 修改: 2026-08-04 10:18

linux-libc-dev CVE-2023-52624 高危 6.1.180-1 kernel: drm/amd/display: Wake DMCUB before executing GPINT commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52624

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-26 18:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52751 高危 6.1.180-1 kernel: smb: client: fix use-after-free in smb2_query_info_compound()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52751

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-21 16:15 修改: 2026-08-04 10:18

linux-libc-dev CVE-2023-53218 高危 6.1.180-1 kernel: rxrpc: Make it so that a waiting process can be aborted

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53218

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-15 15:15 修改: 2026-06-17 06:44

linux-libc-dev CVE-2024-21803 高危 6.1.180-1 kernel: bluetooth: use-after-free vulnerability in af_bluetooth.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21803

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-01-30 08:15 修改: 2026-06-17 07:10

linux-libc-dev CVE-2024-26669 高危 6.1.180-1 kernel: net/sched: flower: Fix chain template offload

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26669

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-02 07:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26836 高危 6.1.180-1 kernel: platform/x86: think-lmi: Fix password opcode ordering for workstations

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26836

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 10:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26913 高危 6.1.180-1 kernel: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26913

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 16:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26914 高危 6.1.180-1 kernel: drm/amd/display: fix incorrect mpc_combine array size

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26914

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 16:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-26944 高危 6.1.180-1 kernel: btrfs: zoned: fix use-after-free in do_zone_finish()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26944

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-35887 高危 6.1.180-1 kernel: ax25: fix use-after-free bugs caused by ax25_ds_del_timer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35887

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 09:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-38570 高危 6.1.180-1 kernel: gfs2: Fix potential glock use-after-free on unmount

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38570

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-19 14:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-38630 高危 6.1.180-1 kernel: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38630

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-21 11:15 修改: 2026-06-17 07:40

linux-libc-dev CVE-2024-41045 高危 6.1.180-1 kernel: bpf: Defer work in bpf_timer_cancel_and_free

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41045

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-29 15:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-41935 高危 6.1.180-1 kernel: f2fs: fix to shrink read extent node in batches

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41935

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-42118 高危 6.1.180-1 kernel: drm/amd/display: Do not return negative stream id for array

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42118

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-42162 高危 6.1.180-1 kernel: gve: Account for stopped queues when reading NIC stats

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42162

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-44941 高危 6.1.180-1 kernel: f2fs: fix to cover read extent cache access with lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-44941

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-26 12:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-44942 高危 6.1.180-1 kernel: f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-44942

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-26 12:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-44951 高危 6.1.180-1 kernel: serial: sc16is7xx: fix TX fifo corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-44951

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-04 19:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46729 高危 6.1.180-1 kernel: drm/amd/display: Fix incorrect size calculation for loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46729

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 07:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46811 高危 6.1.180-1 kernel: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46811

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-27 13:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46813 高危 6.1.180-1 kernel: drm/amd/display: Check link_index before accessing dc->links[]

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46813

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-27 13:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-47691 高危 6.1.180-1 kernel: f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47691

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 12:15 修改: 2026-06-17 07:57

linux-libc-dev CVE-2024-50029 高危 6.1.180-1 kernel: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50029

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 20:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-50217 高危 6.1.180-1 kernel: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50217

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-09 11:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-50226 高危 6.1.180-1 kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50226

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-09 11:15 修改: 2026-06-17 08:03

linux-libc-dev CVE-2024-50282 高危 6.1.180-1 kernel: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50282

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 02:16 修改: 2026-06-17 08:04

linux-libc-dev CVE-2024-53068 高危 6.1.180-1 kernel: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53068

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 18:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53147 高危 6.1.180-1 kernel: exfat: fix out-of-bounds access of directory entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-24 12:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-53168 高危 6.1.180-1 kernel: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53168

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53179 高危 6.1.180-1 kernel: smb: client: fix use-after-free of signing key

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-53218 高危 6.1.180-1 kernel: f2fs: fix race in concurrent f2fs_stop_gc_thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53218

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-56538 高危 6.1.180-1 kernel: drm: zynqmp_kms: Unplug DRM device before removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56538

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56775 高危 6.1.180-1 kernel: drm/amd/display: Fix handling of plane refcount

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56775

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-08 18:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-57900 高危 6.1.180-1 kernel: ila: serialize calls to nf_register_net_hooks()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57900

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-15 13:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57982 高危 6.1.180-1 kernel: xfrm: state: fix out-of-bounds read during lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57982

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2025-21927 高危 6.1.180-1 kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21927

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21967 高危 6.1.180-1 kernel: ksmbd: fix use-after-free in ksmbd_free_work_struct

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21967

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-21969 高危 6.1.180-1 kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21969

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-21985 高危 6.1.180-1 kernel: drm/amd/display: Fix out-of-bound accesses

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21985

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22039 高危 6.1.180-1 kernel: ksmbd: fix overflow in dacloffset bounds check

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22039

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22104 高危 6.1.180-1 kernel: ibmvnic: Use kernel helpers for hex dumps

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22104

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:45

linux-libc-dev CVE-2025-23133 高危 6.1.180-1 kernel: wifi: ath11k: update channel list in reg notifier instead reg worker

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23133

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37750 高危 6.1.180-1 kernel: smb: client: fix UAF in decryption with multichannel

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37750

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-01 13:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37776 高危 6.1.180-1 kernel: ksmbd: fix use-after-free in smb_break_all_levII_oplock()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37776

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-01 14:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37777 高危 6.1.180-1 kernel: ksmbd: fix use-after-free in __smb2_lease_break_noti()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37777

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-01 14:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37861 高危 6.1.180-1 kernel: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-09 07:16 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37952 高危 6.1.180-1 kernel: ksmbd: Fix UAF in __close_file_table_ids

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37952

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-20 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37957 高危 6.1.180-1 kernel: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37957

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-20 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38069 高危 6.1.180-1 kernel: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38069

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38081 高危 6.1.180-1 kernel: spi-rockchip: Fix register out of bounds access

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38117 高危 6.1.180-1 kernel: Bluetooth: MGMT: Protect mgmt_pending list with its own lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38117

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-03 09:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38182 高危 6.1.180-1 kernel: ublk: santizize the arguments from userspace when adding a device

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-04 14:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38204 高危 6.1.180-1 kernel: jfs: fix array-index-out-of-bounds read in add_missing_indices

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38204

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-04 14:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38206 高危 6.1.180-1 kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38206

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-04 14:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38248 高危 6.1.180-1 kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38248

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-09 11:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38369 高危 6.1.180-1 kernel: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38369

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-25 13:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38582 高危 6.1.180-1 kernel: RDMA/hns: Fix double destruction of rsv_qp

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38582

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-19 17:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38585 高危 6.1.180-1 kernel: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38585

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-19 17:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38595 高危 6.1.180-1 kernel: xen: fix UAF in dmabuf_exp_from_pages()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38595

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-19 17:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38616 高危 6.1.180-1 kernel: Linux kernel: Denial of Service in kTLS due to race condition in receive path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38616

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-22 14:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38636 高危 6.1.180-1 kernel: rv: Use strings in da monitors tracepoints

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38636

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-22 16:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38722 高危 6.1.180-1 kernel: habanalabs: fix UAF in export_dmabuf()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38722

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-04 16:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38734 高危 6.1.180-1 kernel: net/smc: fix UAF on smcsk after smc_listen_out()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38734

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-05 18:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39744 高危 6.1.180-1 kernel: rcu: Fix rcu_read_unlock() deadloop due to IRQ work

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39744

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39797 高危 6.1.180-1 kernel: xfrm: Duplicate SPI Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39797

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-12 16:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39810 高危 6.1.180-1 kernel: bnxt_en: Fix memory corruption when FW resources change during ifdown

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39810

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-16 13:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39859 高危 6.1.180-1 kernel: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39859

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-19 16:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39901 高危 6.1.180-1 kernel: i40e: remove read access to debugfs files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39901

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 08:15 修改: 2026-08-03 10:16

linux-libc-dev CVE-2025-39952 高危 6.1.180-1 kernel: wifi: wilc1000: avoid buffer overflow in WID string configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39952

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-04 08:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40354 高危 6.1.180-1 kernel: Linux kernel: Privilege escalation in AMD display driver

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40354

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68809 高危 6.1.180-1 kernel: ksmbd: Remote race condition leads to data integrity issues and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68809

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-71068 高危 6.1.180-1 kernel: svcrdma: bound check rq_pages index in inline path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71068

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-71073 高危 6.1.180-1 kernel: Input: lkkbd - disable pending work before freeing device

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71073

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71152 高危 6.1.180-1 kernel: net: dsa: properly keep track of conduit reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-23 15:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2026-23171 高危 6.1.180-1 kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23171

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 16:15 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23191 高危 6.1.180-1 kernel: ALSA: aloop: Fix racy access at PCM trigger

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23191

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 17:15 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23208 高危 6.1.180-1 kernel: ALSA: usb-audio: Prevent excessive number of frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23208

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 17:15 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23226 高危 6.1.180-1 kernel: Linux kernel (ksmbd): Arbitrary code execution due to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23226

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-18 16:22 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23327 高危 6.1.180-1 kernel: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23327

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23361 高危 6.1.180-1 kernel: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23361

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23447 高危 6.1.180-1 kernel: net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23447

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-03 16:16 修改: 2026-07-24 21:10

linux-libc-dev CVE-2026-23448 高危 6.1.180-1 kernel: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23448

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-03 16:16 修改: 2026-07-24 21:10

linux-libc-dev CVE-2026-31419 高危 6.1.180-1 kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31419

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-13 14:16 修改: 2026-07-15 02:19

linux-libc-dev CVE-2026-31432 高危 6.1.180-1 kernel: ksmbd: fix OOB write in QUERY_INFO for compound requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31432

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-19 13:16

linux-libc-dev CVE-2026-31493 高危 6.1.180-1 kernel: RDMA/efa: Fix use of completion ctx after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31493

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31527 高危 6.1.180-1 kernel: driver core: platform: use generic driver_override infrastructure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31527

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31536 高危 6.1.180-1 kernel: smb: server: let send_done handle a completion without IB_SEND_SIGNALED

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31536

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31568 高危 6.1.180-1 kernel: s390/mm: Add missing secure storage access fixups for donated memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31568

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31663 高危 6.1.180-1 kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31663

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-08-06 13:17

linux-libc-dev CVE-2026-31706 高危 6.1.180-1 kernel: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31706

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 14:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31729 高危 6.1.180-1 kernel: usb: typec: ucsi: validate connector number in ucsi_notify_common()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31729

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-43049 高危 6.1.180-1 kernel: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43049

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43125 高危 6.1.180-1 kernel: dlm: validate length in dlm_search_rsb_tree

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43125

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-07-20 12:19

linux-libc-dev CVE-2026-43198 高危 6.1.180-1 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-07-20 12:19

linux-libc-dev CVE-2026-43250 高危 6.1.180-1 kernel: usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43250

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43490 高危 6.1.180-1 kernel: ksmbd: validate inherited ACE SID length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43490

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-15 06:16 修改: 2026-06-26 19:16

linux-libc-dev CVE-2026-45893 高危 6.1.180-1 kernel: apparmor: Fix & Optimize table creation from possibly unaligned memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45893

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-25 21:10

linux-libc-dev CVE-2026-45943 高危 6.1.180-1 kernel: erofs: fix inline data read failure for ztailpacking pclusters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-24 17:09

linux-libc-dev CVE-2026-45957 高危 6.1.180-1 kernel: rcu: Fix rcu_read_unlock() deadloop due to softirq

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45957

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-46054 高危 6.1.180-1 kernel: selinux: fix overlayfs mmap() and mprotect() access checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46054

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-08-10 13:19

linux-libc-dev CVE-2026-46068 高危 6.1.180-1 kernel: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46068

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-24 17:03

linux-libc-dev CVE-2026-46130 高危 6.1.180-1 kernel: dm-verity-fec: fix reading parity bytes split across blocks (take 3)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46130

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-08-03 10:16

linux-libc-dev CVE-2026-46181 高危 6.1.180-1 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-07-20 12:19

linux-libc-dev CVE-2026-46219 高危 6.1.180-1 kernel: spi: mpc52xx: fix use-after-free on unbind

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46241 高危 6.1.180-1 kernel: spi: mpc52xx: fix use-after-free on registration failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46241

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46293 高危 6.1.180-1 kernel: clk: microchip: mpfs-ccc: fix out of bounds access during output registration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46293

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-08 17:16 修改: 2026-07-23 08:10

linux-libc-dev CVE-2026-52991 高危 6.1.180-1 kernel: sched/psi: fix race between file release and pressure write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52991

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-15 01:16

linux-libc-dev CVE-2026-53000 高危 6.1.180-1 kernel: netfilter: nat: use kfree_rcu to release ops

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53000

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-08-17 12:18

linux-libc-dev CVE-2026-53089 高危 6.1.180-1 kernel: bpf: Fix use-after-free in offloaded map/prog info fill

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53089

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 18:35

linux-libc-dev CVE-2026-53091 高危 6.1.180-1 kernel: net: pull headers in qdisc_pkt_len_segs_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53091

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 18:34

linux-libc-dev CVE-2026-53115 高危 6.1.180-1 kernel: bus: fsl-mc: use generic driver_override infrastructure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53115

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 21:30

linux-libc-dev CVE-2026-53117 高危 6.1.180-1 kernel: s390/cio: use generic driver_override infrastructure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53117

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 21:30

linux-libc-dev CVE-2026-53118 高危 6.1.180-1 kernel: vdpa: use generic driver_override infrastructure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53118

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 21:31

linux-libc-dev CVE-2026-53120 高危 6.1.180-1 kernel: PCI: use generic driver_override infrastructure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53120

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 20:53

linux-libc-dev CVE-2026-53129 高危 6.1.180-1 kernel: fs/mbcache: cancel shrink work before destroying the cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53129

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-06 15:27

linux-libc-dev CVE-2026-53143 高危 6.1.180-1 kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53143

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-08-03 13:18

linux-libc-dev CVE-2026-53156 高危 6.1.180-1 kernel: nvmem: core: fix use-after-free bugs in error paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53156

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-06 16:41

linux-libc-dev CVE-2026-53179 高危 6.1.180-1 kernel: staging: rtl8723bs: fix buffer over-read in rtw_update_protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-06 18:19

linux-libc-dev CVE-2026-53262 高危 6.1.180-1 kernel: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53262

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-08 15:15

linux-libc-dev CVE-2026-53272 高危 6.1.180-1 kernel: erofs: fix use-after-free on sbi->sync_decompress

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53272

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-08 04:01

linux-libc-dev CVE-2026-53330 高危 6.1.180-1 kernel: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53330

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-01 14:16 修改: 2026-07-23 21:34

linux-libc-dev CVE-2026-53361 高危 6.1.180-1 kernel: af_unix: Set gc_in_progress to true in unix_gc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53361

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-04 12:17 修改: 2026-07-22 19:07

linux-libc-dev CVE-2026-63962 高危 6.1.180-1 kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63962

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-64017 高危 6.1.180-1 kernel: blk-mq: pop cached request if it is usable

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64026 高危 6.1.180-1 kernel: rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64026

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64270 高危 6.1.180-1 kernel: Input: mms114 - reject an oversized device packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64270

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64272 高危 6.1.180-1 kernel: Input: mms114 - fix touch indexing for MMS134S and MMS136

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64272

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64434 高危 6.1.180-1 kernel: Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64434

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64564 高危 6.1.180-1 kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64564

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-04 07:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64582 高危 6.1.180-1 kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64582

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 12:18 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68099 高危 6.1.180-1 kernel: ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68099

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68123 高危 6.1.180-1 kernel: openvswitch: fix GSO userspace truncation underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68123

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68136 高危 6.1.180-1 kernel: net: gro: fix double aggregation of flush-marked skbs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68136

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68140 高危 6.1.180-1 kernel: net/iucv: fix use-after-free of a severed iucv_path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68140

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68143 高危 6.1.180-1 kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68143

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68144 高危 6.1.180-1 kernel: Linux kernel Phonet: Memory corruption vulnerability in pep_get_sb() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68144

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68159 高危 6.1.180-1 kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68159

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68160 高危 6.1.180-1 kernel: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68160

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68202 高危 6.1.180-1 kernel: ALSA: seq: close a re-opened queue timer in the destructor

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68202

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68236 高危 6.1.180-1 kernel: drm/amd/display: set new_stream to NULL after release

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68236

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68294 高危 6.1.180-1 kernel: net: qrtr: restrict socket creation to the initial network namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68294

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68376 高危 6.1.180-1 kernel: Linux kernel SCTP: Out-of-bounds read due to incorrect array size calculation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68376

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68409 高危 6.1.180-1 kernel: Kernel: Use-after-free vulnerability in mac80211 Wi-Fi driver

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68409

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68426 高危 6.1.180-1 kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68426

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68432 高危 6.1.180-1 kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68432

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68470 高危 6.1.180-1 kernel: wifi: mac80211: validate extension-frame layout before RX

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68470

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:19 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68480 高危 6.1.180-1 kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68480

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-06 22:18 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72042 高危 6.1.180-1 kernel: ipmi: Fix user refcount underflow in event delivery

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72042

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

mount CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

ncurses-base CVE-2025-69720 高危 6.4-4 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

ncurses-bin CVE-2025-69720 高危 6.4-4 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

git-lfs CVE-2025-26625 高危 3.3.0-1+deb12u1 git-lfs: Git LFS may write to arbitrary files via crafted symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26625

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-17 16:15 修改: 2026-06-17 09:02

openssh-client CVE-2026-59999 高危 1:9.2p1-2+deb12u10 openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59999

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:52

openssh-client CVE-2026-60000 高危 1:9.2p1-2+deb12u10 openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60000

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:51

openssl CVE-2026-14456 高危 3.0.20-1~deb12u2 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:17

golang-github-containers-common CVE-2024-9341 高危 0.50.1+ds1-4 Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9341

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-01 19:15 修改: 2026-08-11 16:17

gzip CVE-2026-41992 高危 1.12-1 GNU gzip contains a global buffer overflow vulnerability in the LZH de ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

libacl1 CVE-2026-54369 高危 2.3.1-3 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 14:16 修改: 2026-08-17 12:18

libblkid1 CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

perl CVE-2026-42497 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

perl CVE-2026-48962 高危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl CVE-2026-57432 高危 5.36.0-7+deb12u3 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

perl CVE-2026-9538 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

libcurl3-gnutls CVE-2026-12064 高危 7.88.1-10+deb12u15 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

libcurl3-gnutls CVE-2026-6276 高危 7.88.1-10+deb12u15 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl3-gnutls CVE-2026-8286 高危 7.88.1-10+deb12u15 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

libcurl3-gnutls CVE-2026-8458 高危 7.88.1-10+deb12u15 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12

perl-base CVE-2026-42497 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

perl-base CVE-2026-48962 高危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl-base CVE-2026-57432 高危 5.36.0-7+deb12u3 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

perl-base CVE-2026-9538 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

libcurl3-gnutls CVE-2026-8927 高危 7.88.1-10+deb12u15 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21

libcurl4 CVE-2026-12064 高危 7.88.1-10+deb12u15 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

libcurl4 CVE-2026-6276 高危 7.88.1-10+deb12u15 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4 CVE-2026-8286 高危 7.88.1-10+deb12u15 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

perl-modules-5.36 CVE-2026-42497 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

perl-modules-5.36 CVE-2026-48962 高危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl-modules-5.36 CVE-2026-57432 高危 5.36.0-7+deb12u3 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

perl-modules-5.36 CVE-2026-9538 高危 5.36.0-7+deb12u3 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

util-linux CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

util-linux-extra CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4 CVE-2026-8458 高危 7.88.1-10+deb12u15 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12

libcurl4 CVE-2026-8927 高危 7.88.1-10+deb12u15 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21

libcurl3-gnutls CVE-2026-5545 中危 7.88.1-10+deb12u15 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl3-gnutls CVE-2026-6253 中危 7.88.1-10+deb12u15 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl3-gnutls CVE-2026-6429 中危 7.88.1-10+deb12u15 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl3-gnutls CVE-2026-8924 中危 7.88.1-10+deb12u15 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06

libcurl3-gnutls CVE-2026-8932 中危 7.88.1-10+deb12u15 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18

curl CVE-2026-5545 中危 7.88.1-10+deb12u15 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

curl CVE-2026-6253 中危 7.88.1-10+deb12u15 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-6429 中危 7.88.1-10+deb12u15 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-8924 中危 7.88.1-10+deb12u15 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06

curl CVE-2026-8932 中危 7.88.1-10+deb12u15 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18

libcurl4 CVE-2026-10536 中危 7.88.1-10+deb12u15 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02

libcurl4 CVE-2026-11856 中危 7.88.1-10+deb12u15 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

libcurl4 CVE-2026-1965 中危 7.88.1-10+deb12u15 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

libcurl4 CVE-2026-4873 中危 7.88.1-10+deb12u15 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

libcurl4 CVE-2026-5545 中危 7.88.1-10+deb12u15 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl4 CVE-2026-6253 中危 7.88.1-10+deb12u15 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4 CVE-2026-6429 中危 7.88.1-10+deb12u15 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4 CVE-2026-8924 中危 7.88.1-10+deb12u15 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06

libcurl4 CVE-2026-8932 中危 7.88.1-10+deb12u15 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18

libdevmapper1.02.1 CVE-2026-19617 中危 2:1.02.185-2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-14 06:17 修改: 2026-08-14 19:07

dirmngr CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

dirmngr CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

dmsetup CVE-2026-19617 中危 2:1.02.185-2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-14 06:17 修改: 2026-08-14 19:07

bzip2 CVE-2026-42250 中危 1.0.8-5+b1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47

libexpat1 CVE-2025-66382 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libexpat1 CVE-2026-32776 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32777 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32778 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-50219 中危 2.5.0-1+deb12u2 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10

libexpat1 CVE-2026-56131 中危 2.5.0-1+deb12u2 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56132 中危 2.5.0-1+deb12u2 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56403 中危 2.5.0-1+deb12u2 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56404 中危 2.5.0-1+deb12u2 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56405 中危 2.5.0-1+deb12u2 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14

libexpat1 CVE-2026-56406 中危 2.5.0-1+deb12u2 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29

libexpat1 CVE-2026-56407 中危 2.5.0-1+deb12u2 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28

libexpat1 CVE-2026-56409 中危 2.5.0-1+deb12u2 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21

libexpat1 CVE-2026-56410 中危 2.5.0-1+deb12u2 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18

libexpat1 CVE-2026-56411 中危 2.5.0-1+deb12u2 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16

libexpat1 CVE-2026-56412 中危 2.5.0-1+deb12u2 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31

libexpat1 CVE-2026-72522 中危 2.5.0-1+deb12u2 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 04:16 修改: 2026-08-13 15:20

gnupg CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

gnupg CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

libmount1 CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libmount1 CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libmount1 CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

gnupg-l10n CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libncurses-dev CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

gnupg-l10n CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

libncurses6 CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

gnupg-utils CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libncursesw6 CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libnghttp2-14 CVE-2026-58055 中危 1.52.0-1+deb12u3 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41

libp11-kit0 CVE-2026-13757 中危 0.24.1-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 19:16 修改: 2026-08-13 21:17

libp11-kit0 CVE-2026-18938 中危 0.24.1-2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07

libpam-modules CVE-2024-10041 中危 1.5.2-6+deb12u2 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16

libpam-modules CVE-2026-54411 中危 1.5.2-6+deb12u2 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-modules-bin CVE-2024-10041 中危 1.5.2-6+deb12u2 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16

libpam-modules-bin CVE-2026-54411 中危 1.5.2-6+deb12u2 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-runtime CVE-2024-10041 中危 1.5.2-6+deb12u2 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16

libpam-runtime CVE-2026-54411 中危 1.5.2-6+deb12u2 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam0g CVE-2024-10041 中危 1.5.2-6+deb12u2 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16

libpam0g CVE-2026-54411 中危 1.5.2-6+deb12u2 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

gnupg-utils CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

bison CVE-2026-56390 中危 2:3.8.2+dfsg-1+b1 bison: GNU Bison: Arbitrary file overwrite via grammar-defined output paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56390

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 16:28

golang-github-containers-image CVE-2024-3727 中危 5.23.1-4 containers/image: digest type does not guarantee valid type

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3727

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-14 15:42 修改: 2026-08-15 03:16

gpg CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

gpg CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

gpg-agent CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

gpg-agent CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

gpg-wks-client CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libperl5.36 CVE-2025-15649 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

libperl5.36 CVE-2026-12087 中危 5.36.0-7+deb12u3 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

libperl5.36 CVE-2026-48959 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

libperl5.36 CVE-2026-48961 中危 5.36.0-7+deb12u3 perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

libperl5.36 CVE-2026-7010 中危 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01

gpg-wks-client CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

libsmartcols1 CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libsmartcols1 CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libsmartcols1 CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

gpg-wks-server CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libsqlite3-0 CVE-2025-7709 中危 3.40.1-2+deb12u2 An integer overflow exists in the FTS5 https://sqlite.org/fts5.html e ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7709

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-08 15:15 修改: 2026-06-17 10:05

libsqlite3-0 CVE-2026-11822 中危 3.40.1-2+deb12u2 SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

libsqlite3-0 CVE-2026-11824 中危 3.40.1-2+deb12u2 SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

libsqlite3-0 CVE-2026-50812 中危 3.40.1-2+deb12u2 A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

libsqlite3-0 CVE-2026-50813 中危 3.40.1-2+deb12u2 An issue in SQLite before Fossil check-in 869a51ae84df allows a local ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

gpg-wks-server CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

gpgconf CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libssh2-1 CVE-2025-15661 中危 1.10.0-3+b1 libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15661

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-18 21:16 修改: 2026-07-14 23:17

libssh2-1 CVE-2026-58051 中危 1.10.0-3+b1 libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58051

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:42

libssh2-1 CVE-2026-66032 中危 1.10.0-3+b1 libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66032

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-24 17:17 修改: 2026-08-07 01:07

libssh2-1 CVE-2026-66034 中危 1.10.0-3+b1 libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66034

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44

gpgconf CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

gpgsm CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libsystemd0 CVE-2026-15059 中危 252.39-1~deb12u2 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

libsystemd0 CVE-2026-16742 中危 252.39-1~deb12u2 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

gpgsm CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

libtinfo6 CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libudev1 CVE-2026-15059 中危 252.39-1~deb12u2 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

libudev1 CVE-2026-16742 中危 252.39-1~deb12u2 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

gpgv CVE-2025-30258 中危 2.2.40-1.1+deb12u2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libuuid1 CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libuuid1 CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libuuid1 CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

gpgv CVE-2025-68972 中危 2.2.40-1.1+deb12u2 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

bison CVE-2026-56389 中危 2:3.8.2+dfsg-1+b1 bison: GNU Bison: Arbitrary Code Execution via malicious grammar file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56389

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 16:28

gzip CVE-2026-41991 中危 1.12-1 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

bsdutils CVE-2026-13595 中危 1:2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libacl1 CVE-2026-54370 中危 2.3.1-3 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

libattr1 CVE-2026-54371 中危 1:2.5.1-4 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16

bsdutils CVE-2026-27456 中危 1:2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libblkid1 CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libblkid1 CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

linux-libc-dev CVE-2019-15213 中危 6.1.180-1 kernel: use-after-free caused by malicious USB device in drivers/media/usb/dvb-usb/dvb-usb-init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15213

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-08-19 22:15 修改: 2026-06-17 02:19

linux-libc-dev CVE-2019-16089 中危 6.1.180-1 kernel: Improper return check in nbd_genl_status function in drivers/block/nbd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16089

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-09-06 23:15 修改: 2026-06-17 02:21

linux-libc-dev CVE-2019-20794 中危 6.1.180-1 kernel: task processes not being properly ended could lead to resource exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20794

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-05-09 18:15 修改: 2026-06-17 02:31

linux-libc-dev CVE-2020-14304 中危 6.1.180-1 kernel: ethtool when reading eeprom of device could lead to memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14304

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-09-15 20:15 修改: 2026-06-17 02:54

linux-libc-dev CVE-2020-36694 中危 6.1.180-1 kernel: netfilter: use-after-free in the packet processing context

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36694

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-21 23:15 修改: 2026-06-17 03:15

linux-libc-dev CVE-2023-0597 中危 6.1.180-1 kernel: x86/mm: Randomize per-cpu entry area

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0597

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:25

linux-libc-dev CVE-2023-21264 中危 6.1.180-1 In multiple functions of mem_protect.c, there is a possible way to acc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21264

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-08-14 21:15 修改: 2026-06-17 05:32

linux-libc-dev CVE-2023-23005 中危 6.1.180-1 kernel: incorrect check for error case in the memory_tier_init

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23005

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-03-01 20:15 修改: 2026-06-17 05:36

linux-libc-dev CVE-2023-31082 中危 6.1.180-1 kernel: sleeping function called from an invalid context in gsmld_write

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-04-24 06:15 修改: 2026-06-17 05:56

linux-libc-dev CVE-2023-3397 中危 6.1.180-1 kernel: slab-use-after-free Write in txEnd due to race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3397

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-11-01 20:15 修改: 2026-06-17 06:13

linux-libc-dev CVE-2023-37454 中危 6.1.180-1 kernel: udf: use-after-free write in udf_close_lvid

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37454

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-06 17:15 修改: 2026-06-17 06:08

linux-libc-dev CVE-2023-4010 中危 6.1.180-1 kernel: usb: hcd: malformed USB descriptor leads to infinite loop in usb_giveback_urb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4010

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-31 17:15 修改: 2026-06-17 06:36

linux-libc-dev CVE-2023-4133 中危 6.1.180-1 kernel: cxgb4: use-after-free in ch_flower_stats_cb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4133

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-08-03 15:15 修改: 2026-06-17 06:37

linux-libc-dev CVE-2023-52590 中危 6.1.180-1 kernel: ocfs2: Avoid touching renamed directory if parent does not change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52590

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-06 07:15 修改: 2026-08-04 10:18

linux-libc-dev CVE-2023-52591 中危 6.1.180-1 kernel: reiserfs: Avoid touching renamed directory if parent does not change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52591

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-06 07:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52625 中危 6.1.180-1 kernel: drm/amd/display: Refactor DMCUB enter/exit idle interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52625

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-26 18:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52629 中危 6.1.180-1 kernel: sh: push-switch: Reorder cleanup operations to avoid use-after-free bug

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52629

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-29 10:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52648 中危 6.1.180-1 kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52671 中危 6.1.180-1 kernel: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52671

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 14:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52676 中危 6.1.180-1 kernel: bpf: Guard stack limits against 32bit overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52676

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 15:15 修改: 2026-08-04 10:18

linux-libc-dev CVE-2023-52761 中危 6.1.180-1 kernel: riscv: VMAP_STACK overflow detection thread-safe

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52761

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-21 16:15 修改: 2026-08-04 10:18

linux-libc-dev CVE-2023-52770 中危 6.1.180-1 kernel: f2fs: split initial and dynamic conditions for extent_cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52770

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-21 16:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52771 中危 6.1.180-1 kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52771

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-21 16:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52797 中危 6.1.180-1 kernel: drivers: perf: Check find_first_bit() return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52797

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-21 16:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52888 中危 6.1.180-1 kernel: media: mediatek: vcodec: Only free buffer VA that is not NULL

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52888

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-52920 中危 6.1.180-1 kernel: bpf: support non-r10 register spill/fill to/from stack in precision tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52920

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-05 10:15 修改: 2026-08-04 10:18

linux-libc-dev CVE-2023-53149 中危 6.1.180-1 kernel: ext4: avoid deadlock in fs reclaim with page writeback

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-15 14:15 修改: 2026-06-17 06:44

linux-libc-dev CVE-2023-53231 中危 6.1.180-1 kernel: erofs: Fix detection of atomic context

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53231

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-15 15:15 修改: 2026-06-17 06:44

linux-libc-dev CVE-2023-53261 中危 6.1.180-1 kernel: coresight: Fix memory leak in acpi_buffer->pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53261

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-15 15:15 修改: 2026-06-17 06:44

linux-libc-dev CVE-2023-53336 中危 6.1.180-1 kernel: media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53336

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-17 15:15 修改: 2026-06-17 06:44

linux-libc-dev CVE-2023-53353 中危 6.1.180-1 kernel: accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53353

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-17 15:15 修改: 2026-06-17 06:44

linux-libc-dev CVE-2023-53367 中危 6.1.180-1 kernel: accel/habanalabs: fix mem leak in capture user mappings

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53367

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-17 15:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53394 中危 6.1.180-1 kernel: net/mlx5e: xsk: Fix crash on regular rq reactivation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53394

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-18 14:15 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53429 中危 6.1.180-1 kernel: btrfs: don't check PageError in __extent_writepage

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53429

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-18 16:15 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53447 中危 6.1.180-1 kernel: f2fs: don't reset unchangable mount option in f2fs_remount()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53447

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-18 16:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53460 中危 6.1.180-1 kernel: wifi: rtw88: fix memory leak in rtw_usb_probe()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53460

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 12:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53491 中危 6.1.180-1 kernel: start_kernel: Add __no_stack_protector function attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53491

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 12:15 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53523 中危 6.1.180-1 kernel: can: gs_usb: fix time stamp counter initialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53523

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 12:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53529 中危 6.1.180-1 kernel: wifi: rtw88: Fix memory leak in rtw88_usb

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53529

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 12:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53538 中危 6.1.180-1 kernel: btrfs: insert tree mod log move in push_node_left

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53538

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-04 16:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53574 中危 6.1.180-1 kernel: wifi: rtw88: delete timer and free skb queue when unloading

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53574

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-04 16:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53627 中危 6.1.180-1 kernel: scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53627

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 16:15 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53706 中危 6.1.180-1 kernel: mm/vmemmap/devdax: fix kernel crash when probing devdax devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53706

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-22 14:15 修改: 2026-06-17 06:45

linux-libc-dev CVE-2023-53762 中危 6.1.180-1 kernel: Linux kernel Bluetooth: Denial of Service due to use-after-free in connection handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53762

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-08 02:15 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53781 中危 6.1.180-1 kernel: smc: Fix use-after-free in tcp_write_timer_handler()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53781

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 01:16 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53846 中危 6.1.180-1 kernel: f2fs: fix to do sanity check on direct node in truncate_dnode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53999 中危 6.1.180-1 kernel: Linux kernel: Denial of Service due to memory leak in mlx5e driver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53999

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 11:15 修改: 2026-06-17 06:46

linux-libc-dev CVE-2023-54013 中危 6.1.180-1 kernel: interconnect: Fix locking for runpm vs reclaim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54013

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 11:15 修改: 2026-06-17 06:46

linux-libc-dev CVE-2023-54107 中危 6.1.180-1 kernel: Linux kernel blk-cgroup: Use-after-free vulnerability leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54107

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 13:16 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-54141 中危 6.1.180-1 kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54141

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 13:16 修改: 2026-06-17 06:46

linux-libc-dev CVE-2023-54263 中危 6.1.180-1 kernel: drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54263

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-30 13:16 修改: 2026-06-17 06:47

linux-libc-dev CVE-2023-54280 中危 6.1.180-1 kernel: cifs: fix potential race when tree connecting ipc

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54280

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-30 13:16 修改: 2026-08-04 11:16

linux-libc-dev CVE-2023-6039 中危 6.1.180-1 kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6039

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-11-09 15:15 修改: 2026-06-17 06:49

linux-libc-dev CVE-2023-6240 中危 6.1.180-1 kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6240

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-04 14:15 修改: 2026-06-17 06:50

linux-libc-dev CVE-2024-14040 中危 6.1.180-1 kernel: net: nexthop: Increase weight to u16

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-14040

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-26 07:16 修改: 2026-07-27 14:16

linux-libc-dev CVE-2024-2193 中危 6.1.180-1 hw: Spectre-SRC that is Speculative Race Conditions (SRCs) for synchronization primitives similar like Spectre V1 with possibility to bypass software features (e.g., IPIs, high-precision timers, etc)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2193

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-15 18:15 修改: 2026-06-17 07:23

linux-libc-dev CVE-2024-24864 中危 6.1.180-1 A race condition was found in the Linux kernel's media/dvb-core in dvb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-05 08:15 修改: 2026-06-17 07:15

linux-libc-dev CVE-2024-25740 中危 6.1.180-1 kernel: memory leak in ubi driver

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25740

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-12 03:15 修改: 2026-06-17 07:16

linux-libc-dev CVE-2024-25742 中危 6.1.180-1 hw: amd: Instruction raise #VC exception at exit

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25742

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 22:15 修改: 2026-06-17 07:16

linux-libc-dev CVE-2024-25743 中危 6.1.180-1 hw: amd: Instruction raise #VC exception at exit

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25743

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-15 18:15 修改: 2026-06-17 07:16

linux-libc-dev CVE-2024-26670 中危 6.1.180-1 kernel: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26670

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-02 07:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26677 中危 6.1.180-1 kernel: rxrpc: Fix delayed ACKs to not set the reference serial number

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26677

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-02 07:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26691 中危 6.1.180-1 kernel: KVM: arm64: Fix circular locking dependency

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26691

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-03 15:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26740 中危 6.1.180-1 kernel: net/sched: act_mirred: use the backlog for mirred ingress

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26740

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-03 17:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26756 中危 6.1.180-1 kernel: md: Don't register sync_thread for reshape directly

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26756

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-03 17:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26799 中危 6.1.180-1 kernel: ASoC: qcom: Fix uninitialized pointer dmactl

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26799

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-04 09:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-26841 中危 6.1.180-1 kernel: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26841

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 10:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26866 中危 6.1.180-1 kernel: spi: lpspi: Avoid potential use-after-free in probe()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 11:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26869 中危 6.1.180-1 kernel: f2fs: fix to truncate meta inode pages forcely

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26869

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 11:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-26876 中危 6.1.180-1 kernel: drm/bridge: adv7511: fix crash on irq during probe

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26876

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 11:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26902 中危 6.1.180-1 kernel: perf: RISCV: Fix panic on pmu overflow handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26902

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-17 11:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26947 中危 6.1.180-1 kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26947

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26948 中危 6.1.180-1 kernel: drm/amd/display: Add a dc_state NULL check in dc_state_release

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26948

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26953 中危 6.1.180-1 kernel: net: esp: fix bad handling of pages from page_pool

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26953

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-26962 中危 6.1.180-1 kernel: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26962

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-27010 中危 6.1.180-1 kernel: net/sched: Fix mirred deadlock on device recursion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27010

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-27011 中危 6.1.180-1 kernel: netfilter: nf_tables: fix memleak in map from abort path

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27011

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 06:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-27041 中危 6.1.180-1 kernel: drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27041

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 13:15 修改: 2026-06-17 07:19

linux-libc-dev CVE-2024-27057 中危 6.1.180-1 kernel: ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27057

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 13:15 修改: 2026-06-17 07:19

linux-libc-dev CVE-2024-27062 中危 6.1.180-1 kernel: nouveau: lock the client object tree.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 13:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-27079 中危 6.1.180-1 kernel: iommu/vt-d: Fix NULL domain on device release

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27079

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 13:15 修改: 2026-06-17 07:19

linux-libc-dev CVE-2024-27408 中危 6.1.180-1 kernel: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27408

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 12:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-35784 中危 6.1.180-1 kernel: btrfs: fix deadlock with fiemap and extent locking

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35784

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 13:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-35794 中危 6.1.180-1 kernel: dm-raid: really frozen sync_thread during suspend

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35794

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 13:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-35799 中危 6.1.180-1 kernel: drm/amd/display: Prevent crash when disable stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35799

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 14:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-35808 中危 6.1.180-1 kernel: md/dm-raid: don't call md_reap_sync_thread() directly

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35808

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 14:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-35860 中危 6.1.180-1 kernel: bpf: support deferring bpf_link dealloc to after RCU grace period

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35860

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 09:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-35904 中危 6.1.180-1 kernel: selinux: avoid dereference of garbage after mount failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35904

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 09:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-35924 中危 6.1.180-1 kernel: usb: typec: ucsi: Limit read size on v1.2

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35924

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 11:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-35931 中危 6.1.180-1 kernel: drm/amdgpu: Skip do PCI error slot reset during RAS recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35931

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 11:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-35942 中危 6.1.180-1 kernel: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35942

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 11:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-35945 中危 6.1.180-1 kernel: net: phy: phy_device: Prevent nullptr exceptions on ISR

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35945

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 11:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-35946 中危 6.1.180-1 kernel: wifi: rtw89: fix null pointer access when abort scan

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35946

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-19 11:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-35951 中危 6.1.180-1 kernel: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35951

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-20 10:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-35961 中危 6.1.180-1 kernel: net/mlx5: Register devlink first under devlink lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-20 10:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-36024 中危 6.1.180-1 kernel: drm/amd/display: Disable idle reallow as part of command/gpint execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36024

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-30 15:15 修改: 2026-06-17 07:35

linux-libc-dev CVE-2024-36881 中危 6.1.180-1 kernel: mm/userfaultfd: reset ptes when close() for wr-protected ones

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36881

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-30 16:15 修改: 2026-06-17 07:37

linux-libc-dev CVE-2024-36911 中危 6.1.180-1 kernel: hv_netvsc: Don't free decrypted memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36911

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-30 16:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-36949 中危 6.1.180-1 kernel: amd/amdkfd: sync all devices to wait all processes being evicted

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36949

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-30 16:15 修改: 2026-06-17 07:37

linux-libc-dev CVE-2024-36951 中危 6.1.180-1 kernel: drm/amdkfd: range check cp bad op exception interrupts

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36951

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-30 16:15 修改: 2026-06-17 07:37

linux-libc-dev CVE-2024-36968 中危 6.1.180-1 kernel: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36968

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-08 13:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-38557 中危 6.1.180-1 kernel: net/mlx5: Reload only IB representors upon lag disable/enable

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38557

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-19 14:15 修改: 2026-06-17 07:40

linux-libc-dev CVE-2024-38564 中危 6.1.180-1 kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38564

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-19 14:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-38594 中危 6.1.180-1 kernel: net: stmmac: move the EST lock to struct stmmac_priv

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38594

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-19 14:15 修改: 2026-06-17 07:40

linux-libc-dev CVE-2024-38608 中危 6.1.180-1 kernel: net/mlx5e: Fix netif state handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38608

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-19 14:15 修改: 2026-06-17 07:40

linux-libc-dev CVE-2024-38620 中危 6.1.180-1 kernel: Bluetooth: HCI: Remove HCI_AMP support

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38620

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-20 08:15 修改: 2026-08-04 11:18

linux-libc-dev CVE-2024-38622 中危 6.1.180-1 kernel: drm/msm/dpu: Add callback function pointer check before its call

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38622

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-21 11:15 修改: 2026-06-17 07:40

linux-libc-dev CVE-2024-38625 中危 6.1.180-1 kernel: fs/ntfs3: Check 'folio' pointer for NULL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38625

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-06-21 11:15 修改: 2026-06-17 07:40

linux-libc-dev CVE-2024-39508 中危 6.1.180-1 kernel: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-39508

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-12 13:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-40965 中危 6.1.180-1 kernel: i2c: lpi2c: Avoid calling clk_get_rate during transfer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40965

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-12 13:15 修改: 2026-06-17 07:46

linux-libc-dev CVE-2024-40969 中危 6.1.180-1 kernel: f2fs: don't set RO when shutting down f2fs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40969

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-12 13:15 修改: 2026-06-17 07:46

linux-libc-dev CVE-2024-40975 中危 6.1.180-1 kernel: platform/x86: x86-android-tablets: Unregister devices in reverse order

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40975

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-12 13:15 修改: 2026-06-17 07:46

linux-libc-dev CVE-2024-40998 中危 6.1.180-1 kernel: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40998

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-12 13:15 修改: 2026-06-17 07:47

linux-libc-dev CVE-2024-40999 中危 6.1.180-1 kernel: net: ena: Add validation for completion descriptors consistency

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40999

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-12 13:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-41008 中危 6.1.180-1 kernel: drm/amdgpu: change vm->task_info handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41008

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-16 08:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-41023 中危 6.1.180-1 kernel: sched/deadline: Fix task_struct reference leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41023

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-29 15:15 修改: 2026-06-17 07:47

linux-libc-dev CVE-2024-41031 中危 6.1.180-1 kernel: mm/filemap: skip to create PMD-sized page cache if needed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41031

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-29 15:15 修改: 2026-06-17 07:47

linux-libc-dev CVE-2024-41082 中危 6.1.180-1 kernel: nvme-fabrics: use reserved tag for reg read/write command

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-29 15:15 修改: 2026-06-17 07:47

linux-libc-dev CVE-2024-42107 中危 6.1.180-1 kernel: ice: Don't process extts if PTP is disabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42107

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-42123 中危 6.1.180-1 kernel: drm/amdgpu: fix double free err_addr pointer warnings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42123

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-42128 中危 6.1.180-1 kernel: leds: an30259a: Use devm_mutex_init() for mutex initialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42128

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-42139 中危 6.1.180-1 kernel: ice: Fix improper extts handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42139

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-42156 中危 6.1.180-1 kernel: s390/pkey: Wipe copies of clear-key structures on failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42156

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-42158 中危 6.1.180-1 kernel: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42158

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-42239 中危 6.1.180-1 kernel: bpf: Fail bpf_timer_cancel when callback is being cancelled

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42239

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-07 16:15 修改: 2026-06-17 07:49

linux-libc-dev CVE-2024-42241 中危 6.1.180-1 kernel: mm/shmem: disable PMD-sized page cache if needed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42241

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-07 16:15 修改: 2026-06-17 07:49

linux-libc-dev CVE-2024-42243 中危 6.1.180-1 kernel: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42243

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-07 16:15 修改: 2026-06-17 07:49

linux-libc-dev CVE-2024-42279 中危 6.1.180-1 kernel: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42279

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-17 09:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-42317 中危 6.1.180-1 kernel: mm/huge_memory: avoid PMD-size page cache if needed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42317

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-17 09:15 修改: 2026-06-17 07:49

linux-libc-dev CVE-2024-43819 中危 6.1.180-1 kernel: kvm: s390: Reject memory region operations for ucontrol VMs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43819

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-17 10:15 修改: 2026-06-17 07:51

linux-libc-dev CVE-2024-43824 中危 6.1.180-1 kernel: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43824

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-17 10:15 修改: 2026-06-17 07:51

linux-libc-dev CVE-2024-43850 中危 6.1.180-1 kernel: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43850

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-17 10:15 修改: 2026-06-17 07:51

linux-libc-dev CVE-2024-43872 中危 6.1.180-1 kernel: RDMA/hns: Fix soft lockup under heavy CEQE load

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43872

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-21 01:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-43899 中危 6.1.180-1 kernel: drm/amd/display: Fix null pointer deref in dcn20_resource.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43899

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-26 11:15 修改: 2026-06-17 07:51

linux-libc-dev CVE-2024-43901 中危 6.1.180-1 kernel: drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43901

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-26 11:15 修改: 2026-06-17 07:51

linux-libc-dev CVE-2024-43913 中危 6.1.180-1 kernel: nvme: apple: fix device reference counting

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43913

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-08-26 11:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-44963 中危 6.1.180-1 kernel: btrfs: do not BUG_ON() when freeing tree block after error

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-44963

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-04 19:15 修改: 2026-06-17 07:53

linux-libc-dev CVE-2024-45015 中危 6.1.180-1 kernel: drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45015

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-11 16:15 修改: 2026-06-17 07:53

linux-libc-dev CVE-2024-46678 中危 6.1.180-1 kernel: bonding: change ipsec_lock from spin lock to mutex

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46678

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-13 06:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46681 中危 6.1.180-1 kernel: pktgen: use cpus_read_lock() in pg_net_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46681

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46698 中危 6.1.180-1 kernel: video/aperture: optionally match the device in sysfb_disable()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46698

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46727 中危 6.1.180-1 kernel: drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46727

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 07:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46728 中危 6.1.180-1 kernel: drm/amd/display: Check index for aux_rd_interval before using

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46728

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 07:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46730 中危 6.1.180-1 kernel: drm/amd/display: Ensure array index tg_inst won't be -1

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46730

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 07:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46754 中危 6.1.180-1 kernel: bpf: Remove tst_run from lwt_seg6local_prog_ops.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46754

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 08:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46760 中危 6.1.180-1 kernel: wifi: rtw88: usb: schedule rx work after everything is set up

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46760

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 08:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46765 中危 6.1.180-1 kernel: ice: protect XDP configuration with a mutex

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46765

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 08:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46775 中危 6.1.180-1 kernel: drm/amd/display: Validate function returns

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46775

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 08:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46776 中危 6.1.180-1 kernel: drm/amd/display: Run DC_LOG_DC after checking link->link_enc

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46776

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 08:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46787 中危 6.1.180-1 kernel: userfaultfd: fix checks for huge PMDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46787

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-18 08:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46806 中危 6.1.180-1 kernel: drm/amdgpu: Fix the warning division or modulo by zero

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46806

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-27 13:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46808 中危 6.1.180-1 kernel: drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46808

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-27 13:15 修改: 2026-06-17 07:55

linux-libc-dev CVE-2024-46834 中危 6.1.180-1 kernel: ethtool: fail closed if we can't get max channel used in indirection tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46834

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-27 13:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-46860 中危 6.1.180-1 kernel: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46860

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-09-27 13:15 修改: 2026-06-17 07:56

linux-libc-dev CVE-2024-46870 中危 6.1.180-1 kernel: drm/amd/display: Disable DMCUB timeout for DCN35

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46870

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-09 14:15 修改: 2026-06-17 07:56

linux-libc-dev CVE-2024-47141 中危 6.1.180-1 kernel: pinmux: Use sequential access to access desc->pinmux data

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47141

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-06-17 07:56

linux-libc-dev CVE-2024-47658 中危 6.1.180-1 kernel: crypto: stm32/cryp - call finalize with bh disabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47658

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-09 14:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-47661 中危 6.1.180-1 kernel: drm/amd/display: Avoid overflow from uint32_t to uint8_t

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47661

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-09 15:15 修改: 2026-06-17 07:57

linux-libc-dev CVE-2024-47662 中危 6.1.180-1 kernel: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47662

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-09 15:15 修改: 2026-06-17 07:57

linux-libc-dev CVE-2024-47664 中危 6.1.180-1 kernel: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47664

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-09 15:15 修改: 2026-06-17 07:57

linux-libc-dev CVE-2024-47703 中危 6.1.180-1 kernel: bpf, lsm: Add check for BPF LSM return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47703

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 12:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-47752 中危 6.1.180-1 kernel: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47752

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 13:15 修改: 2026-06-17 07:57

linux-libc-dev CVE-2024-47794 中危 6.1.180-1 kernel: bpf: Prevent tailcall infinite loop caused by freplace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47794

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-49568 中危 6.1.180-1 kernel: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49568

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-49569 中危 6.1.180-1 kernel: nvme-rdma: unquiesce admin_q before destroy it

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49569

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-08-04 11:20

linux-libc-dev CVE-2024-49893 中危 6.1.180-1 kernel: drm/amd/display: Check stream_status before it is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49893

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49901 中危 6.1.180-1 kernel: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49901

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49906 中危 6.1.180-1 kernel: drm/amd/display: Check null pointer before try to access it

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49906

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49908 中危 6.1.180-1 kernel: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49908

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49910 中危 6.1.180-1 kernel: drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49910

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49914 中危 6.1.180-1 kernel: drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49914

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49916 中危 6.1.180-1 kernel: drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49916

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49918 中危 6.1.180-1 kernel: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49918

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49919 中危 6.1.180-1 kernel: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49919

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49920 中危 6.1.180-1 kernel: drm/amd/display: Check null pointers before multiple uses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49920

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49921 中危 6.1.180-1 kernel: drm/amd/display: Check null pointers before used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49921

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49922 中危 6.1.180-1 kernel: drm/amd/display: Check null pointers before using them

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49922

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49923 中危 6.1.180-1 kernel: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49923

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49926 中危 6.1.180-1 kernel: rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49926

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49940 中危 6.1.180-1 kernel: l2tp: prevent possible tunnel refcount underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49940

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-49945 中危 6.1.180-1 kernel: net/ncsi: Disable the ncsi work before freeing the associated structure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49945

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49970 中危 6.1.180-1 kernel: drm/amd/display: Implement bounds check for stream encoder creation in DCN401

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49970

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-06-17 08:00

linux-libc-dev CVE-2024-49988 中危 6.1.180-1 kernel: ksmbd: add refcnt to ksmbd_conn struct

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49988

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 18:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-50009 中危 6.1.180-1 kernel: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50009

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 19:15 修改: 2026-06-17 08:03

linux-libc-dev CVE-2024-50017 中危 6.1.180-1 kernel: x86/mm/ident_map: Use gbpages only where full GB page should be mapped.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 19:15 修改: 2026-06-17 08:03

linux-libc-dev CVE-2024-50028 中危 6.1.180-1 kernel: thermal: core: Reference count the zone in thermal_zone_get_by_id()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50028

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 20:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-50111 中危 6.1.180-1 kernel: LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50111

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-05 18:15 修改: 2026-06-17 08:03

linux-libc-dev CVE-2024-50135 中危 6.1.180-1 kernel: nvme-pci: fix race condition between reset and nvme_dev_disable()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50135

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-05 18:15 修改: 2026-06-17 08:03

linux-libc-dev CVE-2024-50166 中危 6.1.180-1 kernel: fsl/fman: Fix refcount handling of fman-related devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50166

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-07 10:15 修改: 2026-06-17 08:03

linux-libc-dev CVE-2024-50285 中危 6.1.180-1 kernel: ksmbd: check outstanding simultaneous SMB operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50285

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 02:16 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-50289 中危 6.1.180-1 kernel: media: av7110: fix a spectre vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50289

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 02:16 修改: 2026-06-17 08:04

linux-libc-dev CVE-2024-52559 中危 6.1.180-1 kernel: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52559

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 03:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-52560 中危 6.1.180-1 kernel: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52560

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 03:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-53051 中危 6.1.180-1 kernel: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53051

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 18:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53056 中危 6.1.180-1 kernel: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53056

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 18:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53079 中危 6.1.180-1 kernel: mm/thp: fix deferred split unqueue naming and locking

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53079

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 18:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-53085 中危 6.1.180-1 kernel: tpm: Lock TPM chip in tpm_pm_suspend() first

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53085

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-19 18:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53089 中危 6.1.180-1 kernel: LoongArch: KVM: Mark hrtimer to expire in hard interrupt context

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53089

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-21 19:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53090 中危 6.1.180-1 kernel: afs: Fix lock recursion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53090

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-21 19:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-53091 中危 6.1.180-1 kernel: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53091

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-21 19:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-53094 中危 6.1.180-1 kernel: RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53094

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-21 19:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-53095 中危 6.1.180-1 kernel: smb: client: Fix use-after-free of network namespace.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53095

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-21 19:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2024-53114 中危 6.1.180-1 kernel: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53114

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-02 14:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53134 中危 6.1.180-1 kernel: pmdomain: imx93-blk-ctrl: correct remove path

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53134

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-04 15:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53176 中危 6.1.180-1 kernel: smb: During unmount, ensure all cached dir instances drop their dentry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-53178 中危 6.1.180-1 kernel: smb: Don't leak cfid when reconnect races with open_cached_dir

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-53187 中危 6.1.180-1 kernel: io_uring: check for overflows in io_pin_pages

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53187

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53195 中危 6.1.180-1 kernel: KVM: arm64: Get rid of userspace_irqchip_in_use

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53195

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53216 中危 6.1.180-1 kernel: nfsd: release svc_expkey/svc_export with rcu_work

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53216

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53219 中危 6.1.180-1 kernel: virtiofs: use pages instead of pointer for kernel direct IO

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:08

linux-libc-dev CVE-2024-53224 中危 6.1.180-1 kernel: RDMA/mlx5: Move events notifier registration to be after device registration

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-53687 中危 6.1.180-1 kernel: riscv: Fix IPIs usage in kfence_protect_page()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53687

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-06-17 08:09

linux-libc-dev CVE-2024-54683 中危 6.1.180-1 kernel: netfilter: IDLETIMER: Fix for possible ABBA deadlock

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-54683

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-06-17 08:10

linux-libc-dev CVE-2024-56544 中危 6.1.180-1 kernel: udmabuf: change folios array from kmalloc to kvmalloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56544

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 14:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56565 中危 6.1.180-1 kernel: f2fs: fix to drop all discards after creating snapshot on lvm device

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56565

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56566 中危 6.1.180-1 kernel: mm/slub: Avoid list corruption when removing a slab from the full list

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56566

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56583 中危 6.1.180-1 kernel: sched/deadline: Fix warning in migrate_enable for boosted tasks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56583

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56588 中危 6.1.180-1 kernel: scsi: hisi_sas: Create all dump files during debugfs initialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56588

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56591 中危 6.1.180-1 kernel: Bluetooth: hci_conn: Use disable_delayed_work_sync

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56591

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-56592 中危 6.1.180-1 kernel: bpf: Call free_htab_elem() after htab_unlock_bucket()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56592

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56611 中危 6.1.180-1 kernel: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56611

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56641 中危 6.1.180-1 kernel: net/smc: initialize close_work early to avoid warning

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56641

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-27 15:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-56692 中危 6.1.180-1 kernel: f2fs: fix to do sanity check on node blkaddr in truncate_node()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56692

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-28 10:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-56712 中危 6.1.180-1 kernel: udmabuf: fix memory leak on last export_udmabuf() error path

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-29 09:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56729 中危 6.1.180-1 kernel: smb: Initialize cfid->tcon before performing network ops

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56729

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-29 12:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-56742 中危 6.1.180-1 kernel: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56742

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-29 12:15 修改: 2026-06-17 08:12

linux-libc-dev CVE-2024-57795 中危 6.1.180-1 kernel: RDMA/rxe: Remove the direct link to net_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57795

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-15 13:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57804 中危 6.1.180-1 kernel: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57804

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 13:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-57809 中危 6.1.180-1 kernel: PCI: imx6: Fix suspend/resume support on i.MX6QDL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57809

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 14:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57857 中危 6.1.180-1 kernel: RDMA/siw: Remove direct link to net_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57857

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-15 13:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57872 中危 6.1.180-1 kernel: scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57872

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-11 15:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57888 中危 6.1.180-1 kernel: workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57888

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-15 13:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57974 中危 6.1.180-1 kernel: udp: Deal with race between UDP socket address change and rehash

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57974

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57975 中危 6.1.180-1 kernel: btrfs: do proper folio cleanup when run_delalloc_nocow() failed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57975

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-57976 中危 6.1.180-1 kernel: btrfs: do proper folio cleanup when cow_file_range() failed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57976

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-57984 中危 6.1.180-1 kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57984

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-57999 中危 6.1.180-1 kernel: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57999

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58006 中危 6.1.180-1 kernel: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58006

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 03:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58012 中危 6.1.180-1 kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58012

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 03:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-58053 中危 6.1.180-1 kernel: rxrpc: Fix handling of received connection abort

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58053

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-06 16:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58089 中危 6.1.180-1 kernel: btrfs: fix double accounting race when btrfs_run_delalloc_range() failed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58089

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-12 10:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58094 中危 6.1.180-1 kernel: jfs: add check read-only before truncation in jfs_truncate_nolock()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58094

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58095 中危 6.1.180-1 kernel: jfs: add check read-only before txBeginAnon() call

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58095

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-58096 中危 6.1.180-1 kernel: wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58096

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58097 中危 6.1.180-1 kernel: wifi: ath11k: fix RCU stall while reaping monitor destination ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58097

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-06-17 08:14

linux-libc-dev CVE-2024-58098 中危 6.1.180-1 kernel: bpf: track changes_pkt_data property for global functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58098

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-05 15:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58100 中危 6.1.180-1 kernel: bpf: check changes_pkt_data property for extension programs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58100

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-05 15:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58237 中危 6.1.180-1 kernel: bpf: consider that tail calls invalidate packet pointers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58237

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-05 15:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2024-58241 中危 6.1.180-1 kernel: Kernel: Bluetooth HCI local DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58241

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-24 11:15 修改: 2026-08-04 11:22

linux-libc-dev CVE-2025-21634 中危 6.1.180-1 kernel: cgroup/cpuset: remove kernfs active break

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21634

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-19 11:15 修改: 2026-06-17 08:43

linux-libc-dev CVE-2025-21635 中危 6.1.180-1 kernel: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21635

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-19 11:15 修改: 2026-06-17 08:43

linux-libc-dev CVE-2025-21649 中危 6.1.180-1 kernel: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-19 11:15 修改: 2026-06-17 08:43

linux-libc-dev CVE-2025-21651 中危 6.1.180-1 kernel: net: hns3: don't auto enable misc vector

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-19 11:15 修改: 2026-06-17 08:43

linux-libc-dev CVE-2025-21656 中危 6.1.180-1 kernel: hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21656

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 13:15 修改: 2026-06-17 08:43

linux-libc-dev CVE-2025-21658 中危 6.1.180-1 kernel: btrfs: avoid NULL pointer dereference if no valid extent tree

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21658

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 13:15 修改: 2026-06-17 08:43

linux-libc-dev CVE-2025-21673 中危 6.1.180-1 kernel: smb: client: fix double free of TCP_Server_Info::hostname

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-31 12:15 修改: 2026-07-30 06:18

linux-libc-dev CVE-2025-21693 中危 6.1.180-1 kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21693

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 16:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21696 中危 6.1.180-1 kernel: mm: clear uffd-wp PTE/PMD state on mremap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21696

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-12 14:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21714 中危 6.1.180-1 kernel: RDMA/mlx5: Fix implicit ODP use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21714

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21723 中危 6.1.180-1 kernel: scsi: mpi3mr: Fix possible crash when setting up bsg fails

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21723

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21729 中危 6.1.180-1 kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21729

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 02:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21732 中危 6.1.180-1 kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21732

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 03:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21759 中危 6.1.180-1 kernel: ipv6: mcast: extend RCU protection in igmp6_send()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21759

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 03:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21768 中危 6.1.180-1 kernel: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21768

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 03:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21801 中危 6.1.180-1 kernel: net: ravb: Fix missing rtnl lock in suspend/resume path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21801

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-27 20:16 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21825 中危 6.1.180-1 kernel: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21825

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-06 16:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21831 中危 6.1.180-1 kernel: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21831

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-06 17:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21836 中危 6.1.180-1 kernel: io_uring/kbuf: re-using old struct io_buffer_list may lead to a use-after-free situation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21836

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-07 09:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21870 中危 6.1.180-1 kernel: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21870

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-27 14:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21872 中危 6.1.180-1 kernel: efi: Don't map the entire mokvar table to determine its size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21872

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-27 15:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21885 中危 6.1.180-1 kernel: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21885

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-27 15:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21888 中危 6.1.180-1 kernel: RDMA/mlx5: Fix a WARN during dereg_mr for DM type

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21888

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-27 15:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21892 中危 6.1.180-1 kernel: RDMA/mlx5: Fix the recovery flow of the UMR QP

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21892

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-03-27 15:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21894 中危 6.1.180-1 kernel: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21894

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21907 中危 6.1.180-1 kernel: mm: memory-failure: update ttu flag inside unmap_poisoned_folio

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21907

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-21949 中危 6.1.180-1 kernel: LoongArch: Set hugetlb mmap base address aligned with pmd size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21949

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21955 中危 6.1.180-1 kernel: ksmbd: prevent connection release during oplock break notification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21955

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21961 中危 6.1.180-1 kernel: eth: bnxt: fix truesize for mb-xdp-pass case

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:21

linux-libc-dev CVE-2025-21972 中危 6.1.180-1 kernel: net: mctp: unshare packets when reassembling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-21976 中危 6.1.180-1 kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21976

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-01 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22028 中危 6.1.180-1 kernel: media: vimc: skip .s_stream() for stopped entities

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22028

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-22037 中危 6.1.180-1 kernel: ksmbd: fix null pointer dereference in alloc_preauth_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22037

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22043 中危 6.1.180-1 kernel: ksmbd: add bounds check for durable handle context

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22043

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22048 中危 6.1.180-1 kernel: LoongArch: BPF: Don't override subprog's return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22048

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22053 中危 6.1.180-1 kernel: net: ibmveth: make veth_pool_store stop hanging

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22053

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-22057 中危 6.1.180-1 kernel: net: decrease cached dst counters in dst_release

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22057

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22070 中危 6.1.180-1 kernel: fs/9p: fix NULL pointer dereference on mkdir

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22070

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:44

linux-libc-dev CVE-2025-22103 中危 6.1.180-1 kernel: net: fix NULL pointer dereference in l3mdev_l3_rcv

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22103

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:45

linux-libc-dev CVE-2025-22109 中危 6.1.180-1 kernel: ax25: Remove broken autobind

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22109

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22113 中危 6.1.180-1 kernel: ext4: avoid journaling sb update on error if journal is destroying

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22113

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:45

linux-libc-dev CVE-2025-22115 中危 6.1.180-1 kernel: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22115

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-22125 中危 6.1.180-1 kernel: md/raid1,raid10: don't ignore IO flags

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22125

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:45

linux-libc-dev CVE-2025-22127 中危 6.1.180-1 kernel: f2fs: fix potential deadloop in prepare_compress_overwrite()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22127

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:45

linux-libc-dev CVE-2025-23129 中危 6.1.180-1 kernel: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23129

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:52

linux-libc-dev CVE-2025-23130 中危 6.1.180-1 kernel: f2fs: fix to avoid panic once fallocation fails for pinfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23130

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-06-17 08:52

linux-libc-dev CVE-2025-23132 中危 6.1.180-1 kernel: f2fs: quota: fix to avoid warning in dquot_writeback_dquots()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23132

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-16 15:16 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37747 中危 6.1.180-1 kernel: perf: Fix hang while freeing sigtrap event

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37747

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-01 13:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37800 中危 6.1.180-1 kernel: driver core: fix potential NULL pointer dereference in dev_uevent()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37800

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-08 07:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37802 中危 6.1.180-1 kernel: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37802

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-08 07:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37806 中危 6.1.180-1 kernel: fs/ntfs3: Keep write operations atomic

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37806

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-08 07:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37807 中危 6.1.180-1 kernel: bpf: Fix kmemleak warning for percpu hashmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37807

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-08 07:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37833 中危 6.1.180-1 kernel: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37833

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-08 07:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37834 中危 6.1.180-1 kernel: mm/vmscan: don't try to reclaim hwpoison folio

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37834

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-08 07:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37842 中危 6.1.180-1 kernel: spi: fsl-qspi: use devm function instead of driver remove

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37842

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-09 07:16 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37853 中危 6.1.180-1 kernel: drm/amdkfd: debugfs hang_hws skip GPU with MES

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37853

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-09 07:16 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37856 中危 6.1.180-1 kernel: btrfs: harden block_group::bg_list against list_del() races

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37856

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-09 07:16 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37860 中危 6.1.180-1 kernel: sfc: fix NULL dereferences in ef100_process_design_param()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37860

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-18 07:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37880 中危 6.1.180-1 kernel: um: work around sched_yield not yielding in time-travel mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37880

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-09 07:16 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-37893 中危 6.1.180-1 kernel: LoongArch: BPF: Fix off-by-one error in build_prologue()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37893

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-18 07:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37956 中危 6.1.180-1 kernel: ksmbd: prevent rename with empty string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37956

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-20 16:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-37977 中危 6.1.180-1 kernel: scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37977

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-20 17:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38006 中危 6.1.180-1 kernel: net: mctp: Don't access ifa_index when missing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38006

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38014 中危 6.1.180-1 kernel: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38014

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38029 中危 6.1.180-1 kernel: Linux kernel: Denial of Service due to sleepable page allocation in KASAN

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38029

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38038 中危 6.1.180-1 kernel: Linux kernel: Denial of Service in amd-pstate cpufreq driver via deadlock

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38038

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38039 中危 6.1.180-1 kernel: net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38039

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38041 中危 6.1.180-1 kernel: clk: sunxi-ng: h616: Reparent GPU clock during frequency changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38041

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38042 中危 6.1.180-1 kernel: dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38042

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38045 中危 6.1.180-1 kernel: wifi: iwlwifi: fix debug actions order

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38045

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38059 中危 6.1.180-1 kernel: btrfs: avoid NULL pointer dereference if no valid csum tree

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38059

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-06-17 09:15

linux-libc-dev CVE-2025-38064 中危 6.1.180-1 kernel: virtio: break and reset virtio devices on device_shutdown()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38064

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38080 中危 6.1.180-1 kernel: drm/amd/display: Increase block_sequence array size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38080

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-18 10:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38096 中危 6.1.180-1 kernel: Linux Kernel: Denial of Service in iwlwifi due to improper firmware error handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38096

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-03 09:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38127 中危 6.1.180-1 kernel: ice: fix Tx scheduler error handling in XDP callback

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38127

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-03 09:15 修改: 2026-07-30 06:22

linux-libc-dev CVE-2025-38132 中危 6.1.180-1 kernel: coresight: holding cscfg_csdev_lock while removing cscfg from csdev

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38132

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-03 09:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38140 中危 6.1.180-1 kernel: Linux kernel: Local denial of service in device mapper

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38140

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-03 09:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38195 中危 6.1.180-1 kernel: LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38195

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-04 14:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38203 中危 6.1.180-1 kernel: jfs: Fix null-ptr-deref in jfs_ioc_trim

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38203

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-04 14:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38207 中危 6.1.180-1 kernel: mm: fix uprobe pte be overwritten when expanding vma

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38207

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-04 14:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38234 中危 6.1.180-1 kernel: sched/rt: Fix race in push_rt_task

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38234

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-04 14:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38237 中危 6.1.180-1 kernel: media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38237

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-08 08:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38244 中危 6.1.180-1 kernel: Linux kernel: Denial of Service in SMB client due to deadlock during channel reconnection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-09 11:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38246 中危 6.1.180-1 kernel: bnxt: properly flush XDP redirect lists

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38246

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-09 11:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38261 中危 6.1.180-1 kernel: riscv: save the SR_SUM status over switches

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38261

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-09 11:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38264 中危 6.1.180-1 kernel: nvme-tcp: sanitize request list handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38264

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-09 11:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38272 中危 6.1.180-1 kernel: net: dsa: b53: do not enable EEE on bcm63xx

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38272

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-10 08:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38283 中危 6.1.180-1 kernel: hisi_acc_vfio_pci: bugfix live migration function without VF device driver

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38283

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-10 08:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38311 中危 6.1.180-1 kernel: Linux kernel (iavf): Denial of Service due to a locking issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38311

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-10 08:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38333 中危 6.1.180-1 kernel: f2fs: fix to bail out in get_new_segment()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38333

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-10 09:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38359 中危 6.1.180-1 kernel: s390/mm: Fix in_atomic() handling in do_secure_storage_access()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38359

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-25 13:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38426 中危 6.1.180-1 kernel: drm/amdgpu: Add basic validation for RAS header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38426

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-25 15:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38429 中危 6.1.180-1 kernel: bus: mhi: ep: Update read pointer only after buffer is written

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38429

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-25 15:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38438 中危 6.1.180-1 kernel: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38438

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-25 16:15 修改: 2026-06-17 09:16

linux-libc-dev CVE-2025-38449 中危 6.1.180-1 kernel: drm/gem: Acquire references on GEM handles for framebuffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38449

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-25 16:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38507 中危 6.1.180-1 kernel: HID: nintendo: avoid bluetooth suspend/resume stalls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38507

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-16 11:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38524 中危 6.1.180-1 kernel: rxrpc: Fix recv-recv race of completed call

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38524

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-16 12:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38531 中危 6.1.180-1 kernel: iio: common: st_sensors: Fix use of uninitialize device structs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38531

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-16 12:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38544 中危 6.1.180-1 kernel: Linux kernel: Denial of Service in rxrpc due to prealloc collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38544

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-16 12:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38590 中危 6.1.180-1 kernel: net/mlx5e: Remove skb secpath if xfrm state is not found

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38590

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-19 17:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38597 中危 6.1.180-1 kernel: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38597

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-19 17:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38615 中危 6.1.180-1 kernel: fs/ntfs3: cancle set bad inode after removing name fails

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38615

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-19 17:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-38692 中危 6.1.180-1 kernel: exfat: add cluster chain loop check for dir

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38692

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-04 16:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38705 中危 6.1.180-1 kernel: drm/amd/pm: fix null pointer access

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38705

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-04 16:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38709 中危 6.1.180-1 kernel: loop: Avoid updating block size under exclusive owner

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38709

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-04 16:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38716 中危 6.1.180-1 kernel: hfs: fix general protection fault in hfs_find_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-04 16:15 修改: 2026-06-17 09:17

linux-libc-dev CVE-2025-38717 中危 6.1.180-1 kernel: net: kcm: Fix race condition in kcm_unattach()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-38717

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-04 16:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39677 中危 6.1.180-1 kernel: net/sched: Fix backlog accounting in qdisc_dequeue_internal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39677

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-05 18:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39705 中危 6.1.180-1 kernel: drm/amd/display: fix a Null pointer dereference vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39705

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-05 18:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39707 中危 6.1.180-1 kernel: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39707

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-05 18:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39720 中危 6.1.180-1 kernel: ksmbd: fix refcount leak causing resource not released

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39720

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-05 18:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39726 中危 6.1.180-1 kernel: s390/ism: fix concurrency management in ism_cmd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39726

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-05 18:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39732 中危 6.1.180-1 kernel: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39732

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-07 16:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39746 中危 6.1.180-1 kernel: wifi: ath10k: shutdown driver when hardware is unreliable

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39746

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39747 中危 6.1.180-1 kernel: drm/msm: Add error handling for krealloc in metadata setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39747

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39754 中危 6.1.180-1 kernel: mm/smaps: fix race between smaps_hugetlb_range and migration

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39754

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39762 中危 6.1.180-1 kernel: drm/amd/display: add null check

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39762

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39767 中危 6.1.180-1 kernel: LoongArch: Optimize module load time by optimizing PLT/GOT counting

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39767

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39779 中危 6.1.180-1 kernel: btrfs: subpage: keep TOWRITE tag until folio is cleaned

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39779

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39789 中危 6.1.180-1 kernel: crypto: x86/aegis - Add missing error checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39789

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-11 17:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39829 中危 6.1.180-1 kernel: Linux kernel: Denial of Service due to improper resource deallocation in tracing functionality

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39829

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-16 13:16 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39833 中危 6.1.180-1 kernel: mISDN: hfcpci: Fix warning when deleting uninitialized timer

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39833

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-16 14:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39850 中危 6.1.180-1 kernel: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39850

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-19 16:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39851 中危 6.1.180-1 kernel: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39851

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-19 16:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39886 中危 6.1.180-1 kernel: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39886

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-23 06:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39910 中危 6.1.180-1 kernel: mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39910

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 08:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39925 中危 6.1.180-1 kernel: can: j1939: implement NETDEV_UNREGISTER notification handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39925

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 08:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39927 中危 6.1.180-1 kernel: ceph: fix race condition validating r_parent before applying state

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39927

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-01 08:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39932 中危 6.1.180-1 kernel: smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39932

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-04 08:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39933 中危 6.1.180-1 kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39933

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-04 08:15 修改: 2026-07-30 06:23

linux-libc-dev CVE-2025-39940 中危 6.1.180-1 kernel: Linux kernel: Denial of Service via integer overflow in dm-stripe

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39940

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-04 08:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39947 中危 6.1.180-1 kernel: net/mlx5e: Harden uplink netdev access against device unbind

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39947

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-04 08:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-39961 中危 6.1.180-1 kernel: iommu/amd/pgtbl: Fix possible race while increase page table level

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-09 13:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-39981 中危 6.1.180-1 kernel: Bluetooth: MGMT: Fix possible UAFs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39981

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-15 08:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-39989 中危 6.1.180-1 kernel: x86/mce: use is_copy_from_user() to determine copy-from-user context

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39989

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-18 07:15 修改: 2026-06-17 09:18

linux-libc-dev CVE-2025-40003 中危 6.1.180-1 kernel: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-18 08:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40025 中危 6.1.180-1 kernel: f2fs: fix to do sanity check on node footer for non inode dnode

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40025

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 10:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40054 中危 6.1.180-1 kernel: f2fs: fix UAF issue in f2fs_merge_page_bio()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40054

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40064 中危 6.1.180-1 kernel: smc: Fix use-after-free in __pnet_find_base_ndev()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40064

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40065 中危 6.1.180-1 kernel: RISC-V: KVM: Write hgatp register with valid mode bits

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40065

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40071 中危 6.1.180-1 kernel: tty: n_gsm: Don't block input queue by waiting MSC

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40071

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40074 中危 6.1.180-1 kernel: ipv4: start using dst_dev_rcu()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40074

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40075 中危 6.1.180-1 kernel: tcp_metrics: use dst_dev_net_rcu()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40075

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40077 中危 6.1.180-1 kernel: f2fs: fix to avoid overflow while left shift operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40077

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40097 中危 6.1.180-1 kernel: ALSA: hda: Fix missing pointer check in hda_component_manager_init function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40097

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-30 10:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40102 中危 6.1.180-1 kernel: Linux kernel KVM: Denial of Service due to uninitialized vCPU event handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40102

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-30 10:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40136 中危 6.1.180-1 kernel: crypto: hisilicon/qm - request reserved interrupt for virtual function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40136

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40137 中危 6.1.180-1 kernel: f2fs: fix to truncate first page in error path of f2fs_truncate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40137

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40139 中危 6.1.180-1 kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40139

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40146 中危 6.1.180-1 kernel: blk-mq: fix potential deadlock while nr_requests grown

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40146

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40158 中危 6.1.180-1 kernel: ipv6: use RCU in ip6_output()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40158

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40160 中危 6.1.180-1 kernel: xen/events: Return -EEXIST for bound VIRQs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40160

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40168 中危 6.1.180-1 kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40168

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40170 中危 6.1.180-1 kernel: net: use dst_dev_rcu() in sk_setup_caps()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40170

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 11:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40180 中危 6.1.180-1 kernel: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 22:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40206 中危 6.1.180-1 kernel: netfilter: nft_objref: validate objref and objrefmap expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40206

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-12 22:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40247 中危 6.1.180-1 kernel: drm/msm: Fix pgtable prealloc error path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40247

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-04 16:16 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40266 中危 6.1.180-1 kernel: KVM: arm64: Check the untrusted offset in FF-A memory share

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40266

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-04 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40289 中危 6.1.180-1 kernel: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40289

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-06 22:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40307 中危 6.1.180-1 kernel: exfat: validate cluster allocation bits of the allocation bitmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40307

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-08 01:16 修改: 2026-08-03 10:16

linux-libc-dev CVE-2025-40311 中危 6.1.180-1 kernel: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40311

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-08 01:16 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40325 中危 6.1.180-1 kernel: md/raid10: wait barrier before returning discard request with REQ_NOWAIT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40325

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-18 07:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40328 中危 6.1.180-1 kernel: smb: client: fix potential UAF in smb2_close_cached_fid()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40328

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40333 中危 6.1.180-1 kernel: f2fs: fix infinite loop in __insert_extent_tree()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40333

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40337 中危 6.1.180-1 kernel: net: stmmac: Correctly handle Rx checksum offload errors

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40337

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40338 中危 6.1.180-1 kernel: ASoC: Intel: avs: Do not share the name pointer between components

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40338

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40339 中危 6.1.180-1 kernel: drm/amdgpu: fix nullptr err of vm_handle_moved

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40339

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40355 中危 6.1.180-1 kernel: sysfs: check visibility before changing group attribute ownership

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40355

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-68183 中危 6.1.180-1 kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68183

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68188 中危 6.1.180-1 kernel: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68188

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68190 中危 6.1.180-1 kernel: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68190

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68209 中危 6.1.180-1 kernel: mlx5: Fix default values in create CQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68209

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68236 中危 6.1.180-1 kernel: Linux kernel: Denial of Service during UFS power down

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68236

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68296 中危 6.1.180-1 kernel: Linux kernel: Denial of Service due to race condition in fbcon setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68296

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 16:16 修改: 2026-06-19 13:16

linux-libc-dev CVE-2025-68304 中危 6.1.180-1 kernel: Bluetooth: hci_core: lookup hci_conn on RX path on protocol side

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68304

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68320 中危 6.1.180-1 kernel: Linux kernel (lan966x): Denial of Service via incorrect mutex usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68320

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68322 中危 6.1.180-1 kernel: parisc: Avoid crash due to unaligned access in unwinder

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68322

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 16:16 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68324 中危 6.1.180-1 kernel: Linux kernel: Denial of Service via use-after-free in IMM SCSI host adapter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68324

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-18 15:16 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68342 中危 6.1.180-1 kernel: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68342

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-23 14:16 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68379 中危 6.1.180-1 kernel: Linux kernel: Denial of Service in RDMA subsystem via repeated SRQ modification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68379

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 11:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68736 中危 6.1.180-1 kernel: landlock: Fix handling of disconnected directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68736

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 13:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68745 中危 6.1.180-1 kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68745

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 13:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68755 中危 6.1.180-1 kernel: staging: most: remove broken i2c driver

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68755

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-05 10:15 修改: 2026-06-17 09:59

linux-libc-dev CVE-2025-68768 中危 6.1.180-1 kernel: inet: frags: flush pending skbs in fqdir_pre_exit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68768

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:15 修改: 2026-06-19 13:16

linux-libc-dev CVE-2025-71065 中危 6.1.180-1 kernel: f2fs: fix to avoid potential deadlock

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71065

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71074 中危 6.1.180-1 kernel: Linux kernel functionfs: Use-After-Free vulnerability due to open/removal races

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71074

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-71109 中危 6.1.180-1 kernel: Linux kernel: Memory corruption in ftrace due to buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71109

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-14 15:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-71129 中危 6.1.180-1 kernel: LoongArch: BPF: Sign extend kfunc call arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71129

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-14 15:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71138 中危 6.1.180-1 kernel: drm/msm/dpu: Add missing NULL pointer check for pingpong interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71138

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-14 15:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71160 中危 6.1.180-1 kernel: netfilter: nf_tables: avoid chain re-validation if possible

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71160

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-23 16:15 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71184 中危 6.1.180-1 kernel: btrfs: fix NULL dereference on root when tracing inode eviction

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71184

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-31 12:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71188 中危 6.1.180-1 kernel: dmaengine: lpc18xx-dmamux: fix device leak on route allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71188

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-31 12:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71193 中危 6.1.180-1 kernel: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71193

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-04 17:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71198 中危 6.1.180-1 kernel: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-04 17:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71202 中危 6.1.180-1 kernel: Linux kernel: Memory Corruption and Kernel Crashes via IOMMU SVA coherency issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71202

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 16:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-71225 中危 6.1.180-1 kernel: md: suspend array while updating raid_disks via sysfs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-18 15:18 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71227 中危 6.1.180-1 kernel: wifi: mac80211: don't WARN for connections on invalid channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71227

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-18 15:18 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71272 中危 6.1.180-1 kernel: most: core: fix resource leak in most_register_interface error paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71272

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71273 中危 6.1.180-1 kernel: wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71273

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:03

linux-libc-dev CVE-2025-71285 中危 6.1.180-1 kernel: net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71285

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:04

linux-libc-dev CVE-2025-71289 中危 6.1.180-1 kernel: fs/ntfs3: handle attr_set_size() errors when truncating files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71289

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-71313 中危 6.1.180-1 kernel: PCI: endpoint: Add missing NULL check for alloc_workqueue()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71313

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-03 18:16 修改: 2026-07-22 19:10

linux-libc-dev CVE-2025-71315 中危 6.1.180-1 kernel: drm/vkms: Convert to DRM's vblank timer

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71315

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-08 16:16 修改: 2026-07-23 07:10

linux-libc-dev CVE-2026-22996 中危 6.1.180-1 kernel: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-25 15:15 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23000 中危 6.1.180-1 kernel: Linux kernel (mlx5e): Denial of Service due to NULL pointer dereference during network profile change

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23000

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-25 15:15 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23004 中危 6.1.180-1 kernel: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23004

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-25 15:15 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23035 中危 6.1.180-1 kernel: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23035

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-31 12:16 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23050 中危 6.1.180-1 kernel: pNFS: Fix a deadlock when returning a delegation during open()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23050

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-04 17:16 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23088 中危 6.1.180-1 kernel: tracing: Fix crash on synthetic stacktrace field usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23088

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-04 17:16 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23118 中危 6.1.180-1 kernel: rxrpc: Fix data-race warning and potential load/store tearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23118

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 15:16 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23137 中危 6.1.180-1 kernel: of: unittest: Fix memory leak in unittest_data_add()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23137

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 16:15 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23138 中危 6.1.180-1 kernel: tracing: Add recursion protection in kernel stack trace recording

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23138

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 16:15 修改: 2026-06-17 10:20

linux-libc-dev CVE-2026-23207 中危 6.1.180-1 kernel: spi: tegra210-quad: Protect curr_xfer check in IRQ handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23207

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-14 17:15 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23213 中危 6.1.180-1 kernel: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23213

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-18 15:18 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23214 中危 6.1.180-1 kernel: btrfs: reject new transactions if the fs is fully read-only

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23214

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-18 15:18 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23239 中危 6.1.180-1 kernel: Kernel: Race condition in espintcp can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23239

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-10 18:18 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23240 中危 6.1.180-1 kernel: Linux kernel: Denial of service due to a race condition in the TLS subsystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23240

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-10 18:18 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23247 中危 6.1.180-1 kernel: Linux kernel: Information disclosure via off-path TCP source port leakage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23247

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-18 11:16 修改: 2026-06-19 13:16

linux-libc-dev CVE-2026-23265 中危 6.1.180-1 kernel: f2fs: fix to do sanity check on node footer in {read,write}_end_io

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23265

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-18 18:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23276 中危 6.1.180-1 kernel: net: add xmit recursion limit to tunnel xmit functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23276

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-20 09:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23330 中危 6.1.180-1 kernel: nfc: nci: complete pending data exchange on device close

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23330

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23346 中危 6.1.180-1 kernel: arm64: io: Extract user memory type in ioremap_prot()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23346

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-19 13:16

linux-libc-dev CVE-2026-23348 中危 6.1.180-1 kernel: cxl: Fix race of nvdimm_bus object when creating nvdimm objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23348

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23371 中危 6.1.180-1 kernel: sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23371

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23374 中危 6.1.180-1 kernel: blktrace: fix __this_cpu_read/write in preemptible context

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23374

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23383 中危 6.1.180-1 kernel: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23383

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23393 中危 6.1.180-1 kernel: bridge: cfm: Fix race condition in peer_mep deletion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23393

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23394 中危 6.1.180-1 kernel: af_unix: Give up GC if MSG_PEEK intervened

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23394

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-25 11:16 修改: 2026-06-17 10:21

linux-libc-dev CVE-2026-23419 中危 6.1.180-1 kernel: net/rds: Fix circular locking dependency in rds_tcp_tune

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23419

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-03 14:16 修改: 2026-07-24 21:10

linux-libc-dev CVE-2026-23465 中危 6.1.180-1 kernel: btrfs: log new dentries when logging parent dir of a conflicting inode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23465

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-03 16:16 修改: 2026-07-24 22:10

linux-libc-dev CVE-2026-23472 中危 6.1.180-1 kernel: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23472

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-03 16:16 修改: 2026-07-20 20:10

linux-libc-dev CVE-2026-31410 中危 6.1.180-1 kernel: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31410

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-06 08:16 修改: 2026-07-24 22:10

linux-libc-dev CVE-2026-31420 中危 6.1.180-1 kernel: bridge: mrp: reject zero test interval to avoid OOM panic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31420

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-13 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31458 中危 6.1.180-1 kernel: mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31462 中危 6.1.180-1 kernel: drm/amdgpu: prevent immediate PASID reuse case

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31462

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31487 中危 6.1.180-1 kernel: spi: use generic driver_override infrastructure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31487

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31502 中危 6.1.180-1 kernel: team: fix header_ops type confusion with non-Ethernet ports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31502

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-07-24 15:17

linux-libc-dev CVE-2026-31505 中危 6.1.180-1 kernel: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31505

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31516 中危 6.1.180-1 kernel: xfrm: prevent policy_hthresh.work from racing with netns teardown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31516

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31531 中危 6.1.180-1 kernel: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31531

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-23 12:17 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31537 中危 6.1.180-1 kernel: smb: server: make use of smbdirect_socket.send_io.bcredits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31537

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31557 中危 6.1.180-1 kernel: nvmet: move async event work off nvmet-wq

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31557

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31560 中危 6.1.180-1 kernel: spi: spi-dw-dma: fix print error log when wait finish transaction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31560

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:33

linux-libc-dev CVE-2026-31579 中危 6.1.180-1 kernel: wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31579

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31592 中危 6.1.180-1 kernel: KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31592

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31606 中危 6.1.180-1 kernel: usb: gadget: f_hid: don't call cdev_init while cdev in use

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31606

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31648 中危 6.1.180-1 kernel: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31655 中危 6.1.180-1 kernel: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31655

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-24 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31675 中危 6.1.180-1 kernel: net/sched: sch_netem: fix out-of-bounds access in packet corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31675

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-25 09:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31677 中危 6.1.180-1 kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31677

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-25 09:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31692 中危 6.1.180-1 kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31692

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-30 11:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31707 中危 6.1.180-1 kernel: ksmbd: validate response sizes in ipc_validate_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31707

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 14:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31722 中危 6.1.180-1 kernel: usb: gadget: f_rndis: Fix net_device lifecycle with device_move

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31722

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31723 中危 6.1.180-1 kernel: usb: gadget: f_subset: Fix net_device lifecycle with device_move

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31723

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31724 中危 6.1.180-1 kernel: usb: gadget: f_eem: Fix net_device lifecycle with device_move

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31724

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31725 中危 6.1.180-1 kernel: usb: gadget: f_ecm: Fix net_device lifecycle with device_move

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31725

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31767 中危 6.1.180-1 kernel: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31767

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31771 中危 6.1.180-1 kernel: Bluetooth: hci_event: move wake reason storage into validated event handlers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31771

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-31777 中危 6.1.180-1 kernel: ALSA: ctxfi: Check the error for index mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31777

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:34

linux-libc-dev CVE-2026-43009 中危 6.1.180-1 kernel: bpf: Fix incorrect pruning due to atomic fetch precision tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43009

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43010 中危 6.1.180-1 kernel: bpf: Reject sleepable kprobe_multi programs at attach time

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43010

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-07-04 12:16

linux-libc-dev CVE-2026-43016 中危 6.1.180-1 kernel: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43016

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43022 中危 6.1.180-1 kernel: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43022

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43036 中危 6.1.180-1 kernel: net: use skb_header_pointer() for TCPv4 GSO frag_off check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43036

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43042 中危 6.1.180-1 kernel: mpls: add seqcount to protect the platform_label{,s} pair

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43042

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43048 中危 6.1.180-1 kernel: HID: core: Mitigate potential OOB by removing bogus memset()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43048

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43053 中危 6.1.180-1 kernel: xfs: close crash window in attr dabtree inactivation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43053

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-01 15:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43073 中危 6.1.180-1 kernel: x86-64: rename misleadingly named '__copy_user_nocache()' function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43073

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-05 16:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43083 中危 6.1.180-1 kernel: net: ioam6: fix OOB and missing lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43088 中危 6.1.180-1 kernel: net: af_key: zero aligned sockaddr tail in PF_KEY exports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43088

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-06-19 13:16

linux-libc-dev CVE-2026-43091 中危 6.1.180-1 kernel: xfrm: Wait for RCU readers during policy netns exit

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43091

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43101 中危 6.1.180-1 kernel: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43101

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43107 中危 6.1.180-1 kernel: xfrm: account XFRMA_IF_ID in aevent size calculation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43107

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43115 中危 6.1.180-1 kernel: srcu: Use irq_work to start GP in tiny SRCU

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43115

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43118 中危 6.1.180-1 kernel: btrfs: fix zero size inode with non-zero size after log replay

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43118

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43119 中危 6.1.180-1 kernel: Bluetooth: hci_sync: annotate data-races around hdev->req_status

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43119

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 10:16 修改: 2026-07-24 15:17

linux-libc-dev CVE-2026-43126 中危 6.1.180-1 kernel: ALSA: mixer: oss: Add card disconnect checkpoints

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43126

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:48

linux-libc-dev CVE-2026-43129 中危 6.1.180-1 kernel: ima: verify the previous kernel's IMA buffer lies in addressable RAM

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43129

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-19 13:16

linux-libc-dev CVE-2026-43137 中危 6.1.180-1 kernel: ASoC: SOF: Intel: hda: Fix NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43137

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43153 中危 6.1.180-1 kernel: xfs: remove xfs_attr_leaf_hasname

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43161 中危 6.1.180-1 kernel: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43161

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43167 中危 6.1.180-1 kernel: xfrm: always flush state and policy upon NETDEV_UNREGISTER event

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43167

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43170 中危 6.1.180-1 kernel: usb: dwc3: gadget: Move vbus draw to workqueue context

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43170

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43172 中危 6.1.180-1 kernel: wifi: iwlwifi: fix 22000 series SMEM parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43172

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43173 中危 6.1.180-1 kernel: net: ethernet: xscale: Check for PTP support properly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43173

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43204 中危 6.1.180-1 kernel: ASoC: qcom: q6asm: drop DSP responses for closed data streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43204

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43213 中危 6.1.180-1 kernel: wifi: rtw89: pci: validate sequence number of TX release report

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43213

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43215 中危 6.1.180-1 kernel: cifs: Fix locking usage for tcon fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43215

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43234 中危 6.1.180-1 kernel: team: avoid NETDEV_CHANGEMTU event when unregistering slave

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43234

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43239 中危 6.1.180-1 kernel: smb: client: prevent races in ->query_interfaces()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43239

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43244 中危 6.1.180-1 kernel: kcm: fix zero-frag skb in frag_list on partial sendmsg error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43248 中危 6.1.180-1 kernel: vhost: move vdpa group bound check to vhost_vdpa

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43248

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43258 中危 6.1.180-1 kernel: alpha: fix user-space corruption during memory compaction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43271 中危 6.1.180-1 kernel: md-cluster: fix NULL pointer dereference in process_metadata_update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43271

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43288 中危 6.1.180-1 kernel: ext4: move ext4_percpu_param_init() before ext4_mb_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43288

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43299 中危 6.1.180-1 kernel: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43299

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43308 中危 6.1.180-1 kernel: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43308

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43309 中危 6.1.180-1 kernel: md raid: fix hang when stopping arrays with metadata through dm-raid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43309

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43310 中危 6.1.180-1 kernel: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43310

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43317 中危 6.1.180-1 kernel: most: core: fix leak on early registration failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43317

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43318 中危 6.1.180-1 kernel: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43318

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43338 中危 6.1.180-1 kernel: btrfs: reserve enough transaction items for qgroup ioctls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43338

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43344 中危 6.1.180-1 kernel: perf/x86/intel/uncore: Fix die ID init and look up bugs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43344

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43352 中危 6.1.180-1 kernel: i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43352

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43353 中危 6.1.180-1 kernel: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43353

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43362 中危 6.1.180-1 kernel: smb: client: fix in-place encryption corruption in SMB2_write()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43362

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43409 中危 6.1.180-1 kernel: kprobes: avoid crash when rmmod/insmod after ftrace killed

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43409

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43413 中危 6.1.180-1 kernel: scsi: hisi_sas: Fix NULL pointer exception during user_scan()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43414 中危 6.1.180-1 kernel: scsi: qla2xxx: Completely fix fcport double free

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-07-08 21:23

linux-libc-dev CVE-2026-43416 中危 6.1.180-1 kernel: powerpc, perf: Check that current->mm is alive before getting user callchain

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43416

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43419 中危 6.1.180-1 kernel: ceph: fix memory leaks in ceph_mdsc_build_path()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43419

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43443 中危 6.1.180-1 kernel: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43443

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43456 中危 6.1.180-1 kernel: bonding: fix type confusion in bond_setup_by_slave()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43456

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-08 15:16 修改: 2026-07-24 15:17

linux-libc-dev CVE-2026-43491 中危 6.1.180-1 kernel: net: qrtr: ns: Limit the maximum server registration per node

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43491

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-19 12:16 修改: 2026-06-26 19:14

linux-libc-dev CVE-2026-45855 中危 6.1.180-1 kernel: ata: libata-scsi: avoid Non-NCQ command starvation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45855

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:16 修改: 2026-06-25 21:08

linux-libc-dev CVE-2026-45858 中危 6.1.180-1 kernel: ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45858

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:16 修改: 2026-06-25 21:07

linux-libc-dev CVE-2026-45859 中危 6.1.180-1 kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45859

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:16 修改: 2026-06-25 21:07

linux-libc-dev CVE-2026-45877 中危 6.1.180-1 kernel: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45877

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-25 21:11

linux-libc-dev CVE-2026-45892 中危 6.1.180-1 kernel: ext4: drop extent cache after doing PARTIAL_VALID1 zeroout

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45892

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-25 21:11

linux-libc-dev CVE-2026-45894 中危 6.1.180-1 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45894

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-25 21:10

linux-libc-dev CVE-2026-45897 中危 6.1.180-1 kernel: netfilter: nft_counter: serialize reset with spinlock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45897

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-08-03 10:16

linux-libc-dev CVE-2026-45899 中危 6.1.180-1 kernel: ext4: drop extent cache when splitting extent fails

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45899

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-25 21:09

linux-libc-dev CVE-2026-45901 中危 6.1.180-1 kernel: netfilter: nf_tables: revert commit_mutex usage in reset path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45901

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-08-03 10:16

linux-libc-dev CVE-2026-45917 中危 6.1.180-1 kernel: ipvs: do not keep dest_dst if dev is going down

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45917

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-24 17:23

linux-libc-dev CVE-2026-45934 中危 6.1.180-1 kernel: btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45934

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-24 17:11

linux-libc-dev CVE-2026-45940 中危 6.1.180-1 kernel: net: stmmac: fix oops when split header is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45940

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-24 17:09

linux-libc-dev CVE-2026-45942 中危 6.1.180-1 kernel: ext4: fix e4b bitmap inconsistency reports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45942

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-24 17:09

linux-libc-dev CVE-2026-45944 中危 6.1.180-1 kernel: iommu/vt-d: Clear Present bit before tearing down context entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45944

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-07-24 15:17

linux-libc-dev CVE-2026-45949 中危 6.1.180-1 kernel: hwrng: core - use RCU and work_struct to fix race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45949

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-45961 中危 6.1.180-1 kernel: gfs2: fix memory leaks in gfs2_fill_super error path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-45963 中危 6.1.180-1 kernel: ASoC: nau8821: Cancel delayed work on component remove

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45963

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-45981 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45981

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-45985 中危 6.1.180-1 kernel: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45985

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-45988 中危 6.1.180-1 kernel: rxrpc: Fix re-decryption of RESPONSE packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45988

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-45993 中危 6.1.180-1 kernel: LoongArch: Add spectre boundry for syscall dispatch table

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45993

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-19 13:16

linux-libc-dev CVE-2026-46000 中危 6.1.180-1 kernel: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46000

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-46012 中危 6.1.180-1 kernel: rxrpc: Fix memory leaks in rxkad_verify_response()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46012

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-46014 中危 6.1.180-1 kernel: KVM: SVM: Add missing save/restore handling of LBR MSRs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46014

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-46017 中危 6.1.180-1 kernel: mm: fix deferred split queue races during migration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-46032 中危 6.1.180-1 kernel: KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46032

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-46059 中危 6.1.180-1 kernel: KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46059

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-17 10:52

linux-libc-dev CVE-2026-46071 中危 6.1.180-1 kernel: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46071

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-06-24 16:59

linux-libc-dev CVE-2026-46090 中危 6.1.180-1 kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46090

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 14:17 修改: 2026-07-20 12:19

linux-libc-dev CVE-2026-46111 中危 6.1.180-1 kernel: Bluetooth: hci_conn: fix potential UAF in create_big_sync

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46111

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-24 18:26

linux-libc-dev CVE-2026-46147 中危 6.1.180-1 kernel: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46148 中危 6.1.180-1 kernel: spi: microchip-core-qspi: control built-in cs manually

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46153 中危 6.1.180-1 kernel: 8021q: delete cleared egress QoS mappings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46156 中危 6.1.180-1 kernel: LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46156

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46157 中危 6.1.180-1 kernel: ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46157

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46158 中危 6.1.180-1 kernel: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46158

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46170 中危 6.1.180-1 kernel: mptcp: pm: ADD_ADDR rtx: free sk if last

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46170

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46175 中危 6.1.180-1 kernel: f2fs: fix fsck inconsistency caused by FGGC of node block

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46175

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46200 中危 6.1.180-1 kernel: spi: mpc52xx: fix controller deregistration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46200

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46204 中危 6.1.180-1 kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46204

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46225 中危 6.1.180-1 kernel: spi: rspi: fix controller deregistration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46226 中危 6.1.180-1 kernel: spi: fsl: fix controller deregistration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46226

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46229 中危 6.1.180-1 kernel: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46229

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-28 10:16 修改: 2026-06-17 10:53

linux-libc-dev CVE-2026-46245 中危 6.1.180-1 kernel: drm/amd/display: Fix dc_link NULL handling in HPD init

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-03 18:16 修改: 2026-07-22 20:10

linux-libc-dev CVE-2026-46254 中危 6.1.180-1 kernel: AppArmor: Allow apparmor to handle unaligned dfa tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46254

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-03 18:16 修改: 2026-07-22 20:10

linux-libc-dev CVE-2026-46266 中危 6.1.180-1 kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46266

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-03 18:16 修改: 2026-07-22 20:10

linux-libc-dev CVE-2026-46274 中危 6.1.180-1 kernel: io-wq: check that the predecessor is hashed in io_wq_remove_pending()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46274

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-08 16:16 修改: 2026-07-23 07:10

linux-libc-dev CVE-2026-46282 中危 6.1.180-1 kernel: iio: frequency: admv1013: fix NULL pointer dereference on str

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46282

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-08 17:16 修改: 2026-07-23 08:10

linux-libc-dev CVE-2026-46302 中危 6.1.180-1 kernel: selinux: allow multiple opens of /sys/fs/selinux/policy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46302

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-08 17:16 修改: 2026-07-23 08:10

linux-libc-dev CVE-2026-46312 中危 6.1.180-1 kernel: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46312

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-08 17:16 修改: 2026-07-23 07:10

linux-libc-dev CVE-2026-46324 中危 6.1.180-1 kernel: Linux kernel: netfilter nf_tables denial of service via race condition in netlink hook unregistration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46324

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-09 13:16 修改: 2026-07-23 08:10

linux-libc-dev CVE-2026-46330 中危 6.1.180-1 kernel: Revert "net/smc: Introduce TCP ULP support"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46330

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-09 14:16 修改: 2026-07-23 08:10

linux-libc-dev CVE-2026-52936 中危 6.1.180-1 kernel: crypto: jitterentropy - replace long-held spinlock with mutex

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52936

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 08:16 修改: 2026-07-08 20:31

linux-libc-dev CVE-2026-52937 中危 6.1.180-1 kernel: tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52937

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 08:16 修改: 2026-07-08 19:22

linux-libc-dev CVE-2026-52944 中危 6.1.180-1 kernel: ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52944

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 10:17 修改: 2026-07-08 19:03

linux-libc-dev CVE-2026-52956 中危 6.1.180-1 kernel: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52956

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-14 16:43

linux-libc-dev CVE-2026-52961 中危 6.1.180-1 kernel: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-14 16:20

linux-libc-dev CVE-2026-52988 中危 6.1.180-1 kernel: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52988

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-14 16:46

linux-libc-dev CVE-2026-52990 中危 6.1.180-1 kernel: fsnotify: fix inode reference leak in fsnotify_recalc_mask()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52990

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-14 16:42

linux-libc-dev CVE-2026-53005 中危 6.1.180-1 kernel: af_unix: Drop all SCM attributes for SOCKMAP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53005

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-24 15:17

linux-libc-dev CVE-2026-53009 中危 6.1.180-1 kernel: ice: fix double-free of tx_buf skb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53009

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-08-12 12:19

linux-libc-dev CVE-2026-53015 中危 6.1.180-1 kernel: erofs: unify lcn as u64 for 32-bit platforms

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53015

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-15 13:55

linux-libc-dev CVE-2026-53017 中危 6.1.180-1 kernel: f2fs: fix data loss caused by incorrect use of nat_entry flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-15 13:54

linux-libc-dev CVE-2026-53018 中危 6.1.180-1 kernel: f2fs: avoid reading already updated pages during GC

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53018

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-15 13:54

linux-libc-dev CVE-2026-53024 中危 6.1.180-1 kernel: greybus: raw: fix use-after-free if write is called after disconnect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53024

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-15 13:56

linux-libc-dev CVE-2026-53025 中危 6.1.180-1 kernel: greybus: raw: fix use-after-free on cdev close

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53025

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-15 14:37

linux-libc-dev CVE-2026-53027 中危 6.1.180-1 kernel: fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53027

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-24 15:18

linux-libc-dev CVE-2026-53053 中危 6.1.180-1 kernel: iommu/amd: Fix clone_alias() to use the original device's devid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53053

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-21 17:24

linux-libc-dev CVE-2026-53070 中危 6.1.180-1 kernel: sctp: disable BH before calling udp_tunnel_xmit_skb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53070

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-21 17:39

linux-libc-dev CVE-2026-53076 中危 6.1.180-1 kernel: bpf: Fix OOB in pcpu_init_value

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53076

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-21 18:14

linux-libc-dev CVE-2026-53078 中危 6.1.180-1 kernel: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53078

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-08-03 10:16

linux-libc-dev CVE-2026-53083 中危 6.1.180-1 kernel: bpf: Fix RCU stall in bpf_fd_array_map_clear()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 18:37

linux-libc-dev CVE-2026-53090 中危 6.1.180-1 kernel: bpf: Fix ld_{abs,ind} failure path analysis in subprogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53090

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-08-03 10:16

linux-libc-dev CVE-2026-53102 中危 6.1.180-1 kernel: wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53102

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-21 18:20

linux-libc-dev CVE-2026-53106 中危 6.1.180-1 kernel: bpf: Do not allow deleting local storage in NMI

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53106

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 21:27

linux-libc-dev CVE-2026-53107 中危 6.1.180-1 kernel: wifi: libertas: don't kill URBs in interrupt context

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53107

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 21:27

linux-libc-dev CVE-2026-53108 中危 6.1.180-1 kernel: powerpc/64s: Fix unmap race with PMD migration entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53108

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 21:30

linux-libc-dev CVE-2026-53122 中危 6.1.180-1 kernel: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53122

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-24 17:17 修改: 2026-07-23 20:53

linux-libc-dev CVE-2026-53132 中危 6.1.180-1 kernel: vsock/virtio: fix potential unbounded skb queue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53132

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-06 15:23

linux-libc-dev CVE-2026-53178 中危 6.1.180-1 kernel: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-06 12:43

linux-libc-dev CVE-2026-53185 中危 6.1.180-1 kernel: zram: fix use-after-free in zram_bvec_write_partial()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53185

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-15 01:16

linux-libc-dev CVE-2026-53220 中危 6.1.180-1 kernel: netfilter: revalidate bridge ports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-02 20:49

linux-libc-dev CVE-2026-53224 中危 6.1.180-1 kernel: sctp: validate embedded INIT chunk and address list lengths in cookie

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-02 20:46

linux-libc-dev CVE-2026-53226 中危 6.1.180-1 kernel: gpio: rockchip: fix generic IRQ chip leak on remove

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53226

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-18 16:17

linux-libc-dev CVE-2026-53229 中危 6.1.180-1 kernel: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53229

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-02 20:44

linux-libc-dev CVE-2026-53230 中危 6.1.180-1 kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53230

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-02 20:44

linux-libc-dev CVE-2026-53232 中危 6.1.180-1 kernel: net: phy: clean the sfp upstream if phy probing fails

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53232

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-16 12:18

linux-libc-dev CVE-2026-53237 中危 6.1.180-1 kernel: gpio: mvebu: fix NULL pointer dereference in suspend/resume

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53237

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-08 13:13

linux-libc-dev CVE-2026-53246 中危 6.1.180-1 kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53246

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-07 22:16

linux-libc-dev CVE-2026-53258 中危 6.1.180-1 kernel: wifi: fix leak if split 6 GHz scanning fails

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-08 16:40

linux-libc-dev CVE-2026-53265 中危 6.1.180-1 kernel: Linux kernel: Denial of service and data corruption in device mapper cache policy via race condition.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53265

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-08 04:02

linux-libc-dev CVE-2026-53267 中危 6.1.180-1 kernel: netfilter: nft_ct: bail out on template ct in get eval

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53267

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-25 09:16 修改: 2026-07-08 04:01

linux-libc-dev CVE-2026-53285 中危 6.1.180-1 kernel: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53285

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-26 20:17 修改: 2026-07-08 03:56

linux-libc-dev CVE-2026-53292 中危 6.1.180-1 kernel: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53292

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-26 20:17 修改: 2026-07-08 03:53

linux-libc-dev CVE-2026-53297 中危 6.1.180-1 kernel: net: mana: Guard mana_remove against double invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53297

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-26 20:17 修改: 2026-07-08 03:52

linux-libc-dev CVE-2026-53313 中危 6.1.180-1 kernel: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53313

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-26 20:17 修改: 2026-07-06 20:13

linux-libc-dev CVE-2026-53317 中危 6.1.180-1 kernel: wifi: mt76: mt7921: Place upper limit on station AID

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53317

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-26 20:17 修改: 2026-07-06 20:12

linux-libc-dev CVE-2026-53345 中危 6.1.180-1 kernel: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53345

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-01 14:16 修改: 2026-07-22 19:16

linux-libc-dev CVE-2026-53353 中危 6.1.180-1 kernel: hsr: Remove WARN_ONCE() in hsr_addr_is_self()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53353

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-01 14:16 修改: 2026-07-22 19:14

linux-libc-dev CVE-2026-53358 中危 6.1.180-1 kernel: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53358

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-02 15:17 修改: 2026-07-22 19:07

linux-libc-dev CVE-2026-53368 中危 6.1.180-1 kernel: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53368

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 09:17 修改: 2026-07-29 16:55

linux-libc-dev CVE-2026-53376 中危 6.1.180-1 kernel: drm/amdkfd: Add upper bound check for num_of_nodes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53376

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 11:16 修改: 2026-07-29 16:55

linux-libc-dev CVE-2026-53377 中危 6.1.180-1 kernel: drm/msm: always recover the gpu

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53377

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 11:16 修改: 2026-07-29 16:55

linux-libc-dev CVE-2026-53401 中危 6.1.180-1 kernel: fbdev: omap2: fix use-after-free in omapfb_mmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53401

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 12:16 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-63805 中危 6.1.180-1 kernel: crypto: nx - fix nx_crypto_ctx_exit argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63805

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 12:16 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-63816 中危 6.1.180-1 kernel: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63816

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 12:16 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-63819 中危 6.1.180-1 kernel: f2fs: fix to do sanity check on f2fs_get_node_folio_ra()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63819

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 12:16 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-63825 中危 6.1.180-1 kernel: gcov: use atomic counter updates to fix concurrent access crashes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63825

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 12:16 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-63826 中危 6.1.180-1 kernel: fbdev: fix use-after-free in store_modes()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63826

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 12:16 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-63847 中危 6.1.180-1 kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63847

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63848 中危 6.1.180-1 kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63848

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63854 中危 6.1.180-1 kernel: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63854

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63856 中危 6.1.180-1 kernel: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63856

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63858 中危 6.1.180-1 kernel: netfilter: nf_tables: add hook transactions for device deletions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63858

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63940 中危 6.1.180-1 kernel: KVM: SEV: Ignore Port I/O requests of length '0'

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63940

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63959 中危 6.1.180-1 kernel: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63959

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-63963 中危 6.1.180-1 kernel: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63963

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-63983 中危 6.1.180-1 kernel: net/sched: fix packet loop on netem when duplicate is on

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63983

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-64001 中危 6.1.180-1 kernel: ALSA: pcm: oss: Fix setup list UAF on proc write error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64001

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-64006 中危 6.1.180-1 kernel: netfilter: nf_tables: fix dst corruption in same register operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64006

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-64025 中危 6.1.180-1 kernel: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64025

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64036 中危 6.1.180-1 kernel: cgroup/rstat: validate cpu before css_rstat_cpu() access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64036

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64038 中危 6.1.180-1 kernel: hwmon: (lm90) Stop work before releasing hwmon device

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64038

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64076 中危 6.1.180-1 kernel: netfilter: bridge: eb_tables: close module init race

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64076

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64077 中危 6.1.180-1 kernel: netfilter: ebtables: move to two-stage removal scheme

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64077

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64079 中危 6.1.180-1 kernel: netfilter: x_tables: allocate hook ops while under mutex

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64079

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64082 中危 6.1.180-1 kernel: riscv: Fix register corruption from uninitialized cregs on error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64109 中危 6.1.180-1 kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64109

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-08-12 15:51

linux-libc-dev CVE-2026-64112 中危 6.1.180-1 kernel: rbd: eliminate a race in lock_dwork draining on unmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64112

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-08-12 15:50

linux-libc-dev CVE-2026-64138 中危 6.1.180-1 kernel: ksmbd: validate SID in parent security descriptor during ACL inheritance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64138

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64139 中危 6.1.180-1 kernel: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64139

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64144 中危 6.1.180-1 kernel: Bluetooth: btmtk: fix urb->setup_packet leak in error paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64144

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-08-17 19:39

linux-libc-dev CVE-2026-64146 中危 6.1.180-1 kernel: erofs: fix metabuf leak in inode xattr initialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64146

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-08-17 19:37

linux-libc-dev CVE-2026-64160 中危 6.1.180-1 kernel: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64160

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-08-17 15:05

linux-libc-dev CVE-2026-64163 中危 6.1.180-1 kernel: test_kprobes: clear kprobes between test runs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64163

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-08-13 15:32

linux-libc-dev CVE-2026-64190 中危 6.1.180-1 kernel: net: team: fix NULL pointer dereference in team_xmit during mode change

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64190

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-20 17:18 修改: 2026-08-11 19:06

linux-libc-dev CVE-2026-64192 中危 6.1.180-1 kernel: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64192

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-20 17:18 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64210 中危 6.1.180-1 kernel: net/mlx5e: xsk: Fix unlocked writing to ICOSQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64210

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-24 16:16 修改: 2026-08-11 18:27

linux-libc-dev CVE-2026-64212 中危 6.1.180-1 kernel: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64212

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-24 16:16 修改: 2026-08-11 17:23

linux-libc-dev CVE-2026-64213 中危 6.1.180-1 kernel: hwmon: (lm90) Add lock protection to lm90_alert

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64213

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-24 16:16 修改: 2026-08-11 17:22

linux-libc-dev CVE-2026-64241 中危 6.1.180-1 kernel: gpio: rockchip: teardown bugs and resource leaks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64241

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-24 16:16 修改: 2026-08-13 17:21

linux-libc-dev CVE-2026-64280 中危 6.1.180-1 kernel: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64280

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64294 中危 6.1.180-1 kernel: mm: do file ownership checks with the proper mount idmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64294

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64305 中危 6.1.180-1 kernel: crypto: qat - protect service table iterations with service_lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64305

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64319 中危 6.1.180-1 kernel: nvmet-auth: validate reply message payload bounds against transfer length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64319

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64320 中危 6.1.180-1 kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64320

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64341 中危 6.1.180-1 kernel: USB: iowarrior: fix use-after-free on disconnect race

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64341

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64345 中危 6.1.180-1 kernel: usb: gadget: f_printer: take kref only for successful open

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64345

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64348 中危 6.1.180-1 kernel: usb: free iso schedules on failed submit

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64348

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64389 中危 6.1.180-1 kernel: ksmbd: validate NTLMv2 response before updating session key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64389

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64391 中危 6.1.180-1 kernel: ksmbd: use opener credentials for ADS I/O

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64391

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64392 中危 6.1.180-1 kernel: ksmbd: use opener credentials for delete-on-close

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64392

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64400 中危 6.1.180-1 kernel: ksmbd: prevent path traversal bypass by restricting caseless retry

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64400

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64424 中危 6.1.180-1 kernel: netpoll: fix a use-after-free on shutdown path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64424

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64463 中危 6.1.180-1 kernel: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64463

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64481 中危 6.1.180-1 kernel: ALSA: hda/cs35l41: Fix firmware load work teardown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64481

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64507 中危 6.1.180-1 kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64507

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64508 中危 6.1.180-1 kernel: bpf: Support for hardening against JIT spraying

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64508

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64542 中危 6.1.180-1 kernel: ipv6: ndisc: fix NULL deref in accept_untracked_na()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64542

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 21:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64543 中危 6.1.180-1 kernel: tipc: fix use-after-free of the discoverer in tipc_disc_rcv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64543

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 21:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64556 中危 6.1.180-1 kernel: perf/core: Detach event groups during remove_on_exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64556

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 09:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64561 中危 6.1.180-1 kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64561

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-04 07:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64562 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: K ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64562

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-04 07:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64563 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: r ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64563

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-04 07:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64565 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: I ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64565

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-04 07:16 修改: 2026-08-04 07:16

linux-libc-dev CVE-2026-64567 中危 6.1.180-1 kernel: btrfs: reject free space cache with more entries than pages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64567

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64569 中危 6.1.180-1 kernel: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64569

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64571 中危 6.1.180-1 kernel: wifi: p54: validate RX frame length in p54_rx_eeprom_readback()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64571

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64572 中危 6.1.180-1 kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64572

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64573 中危 6.1.180-1 kernel: Bluetooth: qca: fix NVM tag length underflow in TLV parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64573

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64576 中危 6.1.180-1 kernel: nexthop: initialize extack in nh_res_bucket_migrate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64576

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64577 中危 6.1.180-1 kernel: gtp: check skb_pull_data() return in gtp1u_send_echo_resp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64577

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64578 中危 6.1.180-1 kernel: ksmbd: validate compound request size before reading StructureSize2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64578

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64579 中危 6.1.180-1 kernel: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64579

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64580 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: x ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64580

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64581 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: x ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64581

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64583 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64583

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-06 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64584 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64584

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-06 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64586 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: w ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64586

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-06 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-64590 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64590

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-06 08:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68081 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: K ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-08 10:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68082 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: l ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-08 10:16 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68083 中危 6.1.180-1 kernel: ksmbd: fix path resolution in ksmbd_vfs_kern_path_create

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 12:17 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68085 中危 6.1.180-1 kernel: Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68085

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 12:17 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68086 中危 6.1.180-1 kernel: mm/khugepaged: write all dirty file folios when collapsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68086

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 12:17 修改: 2026-08-10 12:17

linux-libc-dev CVE-2026-68093 中危 6.1.180-1 kernel: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68093

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68096 中危 6.1.180-1 kernel: audit: fix recursive locking deadlock in audit_dupe_exe()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68096

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68097 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: k ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68097

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68098 中危 6.1.180-1 kernel: ksmbd: bound DACL dedup walk to copied ACEs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68098

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68100 中危 6.1.180-1 kernel: ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68100

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68104 中危 6.1.180-1 kernel: drm/amdgpu: invoke pm_genpd_remove() before freeing genpd

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68104

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68106 中危 6.1.180-1 kernel: drm/amdgpu: fix division by zero with invalid uvd dimensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68106

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68108 中危 6.1.180-1 kernel: drm/amdgpu/vce: fix integer overflow in image size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68108

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68111 中危 6.1.180-1 kernel: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68111

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68112 中危 6.1.180-1 kernel: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68112

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68113 中危 6.1.180-1 kernel: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68113

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68114 中危 6.1.180-1 kernel: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68114

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68117 中危 6.1.180-1 kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68117

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68118 中危 6.1.180-1 kernel: tcp: challenge ACK for non-exact RST in SYN-RECEIVED

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68118

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68121 中危 6.1.180-1 kernel: Linux kernel: PPPoE memory corruption via stale pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68121

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68124 中危 6.1.180-1 kernel: mctp: serial: handle zero-length frames to prevent rx buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68124

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68125 中危 6.1.180-1 kernel: mac802154: llsec: reject frames shorter than the authentication tag

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68125

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68127 中危 6.1.180-1 kernel: ila: reload IPv6 header after pskb_may_pull in checksum adjust

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68127

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68129 中危 6.1.180-1 kernel: gve: fix Rx queue stall on alloc failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68129

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68130 中危 6.1.180-1 kernel: ksmbd: defer destroy_previous_session() until after NTLM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68130

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68131 中危 6.1.180-1 kernel: rbd: Reset positive result codes to zero in object map update path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68131

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68135 中危 6.1.180-1 kernel: net: hip04: fix RX buffer leak on build_skb failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68135

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68137 中危 6.1.180-1 kernel: net/x25: fix use-after-free in x25_kill_by_neigh()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68137

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68138 中危 6.1.180-1 kernel: net/sched: serialize qdisc_rtab_list against concurrent get/put

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68138

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68141 中危 6.1.180-1 kernel: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68141

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68142 中危 6.1.180-1 kernel: geneve: require CAP_NET_ADMIN in the device netns for changelink

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68142

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68146 中危 6.1.180-1 kernel: ftrace: Add global mutex to serialize trace_parser access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68146

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68147 中危 6.1.180-1 kernel: fscrypt: Avoid dynamic allocation in fscrypt_get_devices()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68148 中危 6.1.180-1 kernel: fscrypt: Add missing superblock check in find_or_insert_direct_key()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68151 中危 6.1.180-1 kernel: binfmt_elf_fdpic: only honour the first PT_INTERP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68152 中危 6.1.180-1 kernel: amt: fix use-after-free in AMT delayed works

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68153 中危 6.1.180-1 kernel: libceph: remove debugfs files before client teardown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68154 中危 6.1.180-1 kernel: libceph: reject zero bucket types in crush_decode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68154

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68155 中危 6.1.180-1 kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68155

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68156 中危 6.1.180-1 kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68156

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68157 中危 6.1.180-1 kernel: Linux kernel: libceph null pointer dereference leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68157

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68158 中危 6.1.180-1 kernel: libceph: Fix multiplication overflow in decode_new_up_state_weight()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68158

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68161 中危 6.1.180-1 kernel: sctp: close UDP tunnel sockets during netns teardown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68161

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68162 中危 6.1.180-1 kernel: sctp: avoid auth_enable sysctl UAF during netns teardown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68162

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68169 中危 6.1.180-1 kernel: mptcp: pm: userspace: fix use-after-free in get_local_id

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68169

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68180 中危 6.1.180-1 kernel: intel_th: fix MSC output device reference leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68181 中危 6.1.180-1 kernel: mei: bus: access mei_device under device_lock on cleanup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68182 中危 6.1.180-1 kernel: comedi: comedi_parport: deal with premature interrupt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68183 中危 6.1.180-1 kernel: firmware: stratix10-svc: fix memory leaks and list corruption bugs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68183

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68184 中危 6.1.180-1 kernel: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68184

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68185 中危 6.1.180-1 kernel: LoongArch: Move jump_label_init() before parse_early_param()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68185

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68186 中危 6.1.180-1 kernel: binfmt_misc: set have_execfd only once the interpreter is opened

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68186

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68187 中危 6.1.180-1 kernel: exec: fix unsigned loop counter wrap in transfer_args_to_stack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68187

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68188 中危 6.1.180-1 kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68188

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68189 中危 6.1.180-1 kernel: Bluetooth: hci_sync: Protect UUID list traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68189

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68190 中危 6.1.180-1 kernel: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68190

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68192 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: w ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68192

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68194 中危 6.1.180-1 kernel: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68194

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68195 中危 6.1.180-1 kernel: wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68195

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68196 中危 6.1.180-1 kernel: wifi: wilc1000: validate assoc response length before subtracting header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68196

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68197 中危 6.1.180-1 kernel: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68197

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68198 中危 6.1.180-1 kernel: Linux kernel: Use-after-free in ath6kl Wi-Fi driver leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68199 中危 6.1.180-1 kernel: wifi: ath6kl: fix OOB access from firmware ADDBA window size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68199

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68203 中危 6.1.180-1 kernel: media: vivid: fix cleanup bugs in vivid_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68203

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68204 中危 6.1.180-1 kernel: media: vivid: check for vb2_is_busy() when toggling caps

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68204

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68205 中危 6.1.180-1 kernel: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68205

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68206 中危 6.1.180-1 kernel: media: v4l2-ctrls: validate HEVC active reference counts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68206

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68207 中危 6.1.180-1 kernel: media: ti: vpe: unwind v4l2 device registration on probe error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68207

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68209 中危 6.1.180-1 kernel: media: sun4i-csi: Return queued buffers on start_streaming() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68209

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68210 中危 6.1.180-1 kernel: media: stm32: dcmi: unregister notifier on probe failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68210

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68212 中危 6.1.180-1 kernel: media: saa7134: Fix a possible memory leak in saa7134_video_init1

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68212

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68213 中危 6.1.180-1 kernel: media: rtl2832_sdr: Return queued buffers on start_streaming() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68213

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68214 中危 6.1.180-1 kernel: media: rtl2832: fix use-after-free in rtl2832_remove()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68214

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68215 中危 6.1.180-1 kernel: media: radio-si476x: Unregister v4l2_device on probe failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68215

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68222 中危 6.1.180-1 kernel: media: msi2500: Return queued buffers on start_streaming() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68222

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68223 中危 6.1.180-1 kernel: media: meson: vdec: Fix memory leak in error path of vdec_open

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68223

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68229 中危 6.1.180-1 kernel: media: cedrus: skip invalid H.264 reference list entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68229

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68231 中危 6.1.180-1 kernel: media: airspy: Return queued buffers on start_streaming() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68231

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68233 中危 6.1.180-1 kernel: drm/vc4: Shut down BO cache timer before teardown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68233

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68242 中危 6.1.180-1 kernel: drm/i915/gt: Fix NULL deref on sched_engine alloc failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68242

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68243 中危 6.1.180-1 kernel: drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68243

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68244 中危 6.1.180-1 kernel: drm/i915/gem: Do not leak siblings[] on proto context error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68245 中危 6.1.180-1 kernel: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68246 中危 6.1.180-1 kernel: drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68246

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68247 中危 6.1.180-1 kernel: drm/i915/bios: range check LFP Data Block panel_type2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68247

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68248 中危 6.1.180-1 kernel: drm/i915: Return NULL on error in active_instance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68248

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68253 中危 6.1.180-1 kernel: drm/i915/hdcp: check streams[] bounds before overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68253

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68255 中危 6.1.180-1 kernel: drm/virtio: bound EDID block reads to the response buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68255

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68257 中危 6.1.180-1 kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68257

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68258 中危 6.1.180-1 kernel: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68258

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68259 中危 6.1.180-1 kernel: drm/amdkfd: Check bounds in allocate_event_notification_slot

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68259

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68269 中危 6.1.180-1 kernel: drm/i915/gem: Add missing nospec on parallel submit slot

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68269

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68273 中危 6.1.180-1 kernel: drm/amdgpu: Fix context pstate override handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68273

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68277 中危 6.1.180-1 kernel: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68277

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68278 中危 6.1.180-1 kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68278

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68279 中危 6.1.180-1 kernel: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68279

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68280 中危 6.1.180-1 kernel: drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68280

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68284 中危 6.1.180-1 kernel: Linux kernel: bpf/sockmap use-after-free vulnerability leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68284

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68286 中危 6.1.180-1 kernel: drop_monitor: perform u64_stats updates under IRQ-disabled section

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68286

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68287 中危 6.1.180-1 kernel: drop_monitor: fix size calculations for 64-bit attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68287

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68289 中危 6.1.180-1 kernel: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68289

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68293 中危 6.1.180-1 kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68293

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68297 中危 6.1.180-1 kernel: tipc: fix u16 MTU truncation in media and bearer MTU validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68297

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68299 中危 6.1.180-1 kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68299

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68300 中危 6.1.180-1 kernel: sctp: auth: verify auth requirement when auth_chunk is NULL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68300

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68302 中危 6.1.180-1 kernel: amt: re-read skb header pointers after every pull

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68302

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68303 中危 6.1.180-1 kernel: drm/vc4: hvs/v3d: Fix null dereference in unbind

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68303

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68309 中危 6.1.180-1 kernel: wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68309

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68310 中危 6.1.180-1 kernel: wifi: mt76: mt7915: guard HE capability lookups

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68310

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68312 中危 6.1.180-1 kernel: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68312

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68315 中危 6.1.180-1 kernel: sctp: validate stream count in sctp_process_strreset_inreq()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68315

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68320 中危 6.1.180-1 kernel: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68320

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68322 中危 6.1.180-1 kernel: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68322

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68323 中危 6.1.180-1 kernel: tipc: serialize udp bearer replicast list updates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68323

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68324 中危 6.1.180-1 kernel: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68324

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68325 中危 6.1.180-1 kernel: iommu/amd: Bound the early ACPI HID map

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68325

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68326 中危 6.1.180-1 kernel: wifi: mwifiex: bound uAP association event IEs to the event buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68326

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68327 中危 6.1.180-1 kernel: wan: wanxl: Only reset hardware after BAR mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68327

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68329 中危 6.1.180-1 kernel: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68329

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68335 中危 6.1.180-1 kernel: Linux kernel RDS: Use-after-free due to cross-network namespace message delivery

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68335

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68338 中危 6.1.180-1 kernel: net/packet: avoid fanout hook re-registration after unregister

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68338

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68340 中危 6.1.180-1 kernel: hwmon: occ: validate poll response sensor blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68340

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68343 中危 6.1.180-1 kernel: smb: client: validate DFS referral PathConsumed

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68343

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68344 中危 6.1.180-1 kernel: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68344

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68349 中危 6.1.180-1 kernel: wifi: carl9170: fix buffer overflow in rx_stream failover path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68349

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68350 中危 6.1.180-1 kernel: Linux kernel carl9170 Wi-Fi driver: Out-of-bounds read vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68350

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68351 中危 6.1.180-1 kernel: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68351

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68352 中危 6.1.180-1 kernel: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68352

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68353 中危 6.1.180-1 kernel: wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68353

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68354 中危 6.1.180-1 kernel: firewire: net: Fix fragmented datagram reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68354

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68355 中危 6.1.180-1 kernel: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68355

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68357 中危 6.1.180-1 kernel: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68357

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68359 中危 6.1.180-1 kernel: hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68359

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68360 中危 6.1.180-1 kernel: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68361 中危 6.1.180-1 kernel: hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68361

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68362 中危 6.1.180-1 kernel: wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68362

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68363 中危 6.1.180-1 kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68363

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68364 中危 6.1.180-1 kernel: drm/amd/display: Fix ISM dc_lock deadlock during suspend

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68364

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68365 中危 6.1.180-1 kernel: USB: serial: io_edgeport: cap received transmit credits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68365

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68366 中危 6.1.180-1 kernel: usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68366

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68367 中危 6.1.180-1 kernel: usb: gadget: f_tcm: synchronize delayed set_alt with teardown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68367

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68368 中危 6.1.180-1 kernel: usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68368

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68369 中危 6.1.180-1 kernel: usb: gadget: printer: fix infinite loop in printer_read()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68369

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68370 中危 6.1.180-1 kernel: usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68370

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68371 中危 6.1.180-1 kernel: usb: musb: omap2430: Do not put borrowed of_node in probe

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68371

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68373 中危 6.1.180-1 kernel: Linux kernel: Out-of-bounds read in wifi driver due to length underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68373

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68374 中危 6.1.180-1 kernel: usb: core: sysfs: add lock to bos_descriptors_read()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68374

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68377 中危 6.1.180-1 kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68377

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68388 中危 6.1.180-1 kernel: smb/client: handle overlapping allocated ranges in fallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68388

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68391 中危 6.1.180-1 kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68391

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68395 中危 6.1.180-1 kernel: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68395

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68396 中危 6.1.180-1 kernel: scsi: core: wake eh reliably when using scsi_schedule_eh

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68396

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68397 中危 6.1.180-1 kernel: net/iucv: take a reference on the socket found in afiucv_hs_rcv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68397

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68398 中危 6.1.180-1 kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68398

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68399 中危 6.1.180-1 kernel: bpf: Fix UAF in sock clone early bailouts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68399

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68401 中危 6.1.180-1 kernel: firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68401

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68402 中危 6.1.180-1 kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68402

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68404 中危 6.1.180-1 kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68404

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68410 中危 6.1.180-1 kernel: wifi: libertas: fix memory leak in helper_firmware_cb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68410

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68411 中危 6.1.180-1 kernel: wifi: mac80211_hwsim: clamp virtio RX length before skb_put

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68411

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68413 中危 6.1.180-1 kernel: memory leak in ipw2100_pci_init_one()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68414 中危 6.1.180-1 kernel: wifi: cfg80211: cancel sched scan results work on unregister

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68417 中危 6.1.180-1 kernel: RDMA/siw: publish QP after initialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68417

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68425 中危 6.1.180-1 kernel: IB/mad: Drop unmatched RMPP responses before reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68425

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68427 中危 6.1.180-1 kernel: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68427

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68428 中危 6.1.180-1 kernel: KVM: x86/mmu: Fix use-after-free on vendor module reload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68428

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68431 中危 6.1.180-1 kernel: ksmbd: validate minimum PDU size for transform requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68431

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68433 中危 6.1.180-1 kernel: libceph: bound get_version reply decode to front len

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68433

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68435 中危 6.1.180-1 kernel: LoongArch: Fix address space mismatch in kexec command line lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68435

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68441 中危 6.1.180-1 kernel: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68444 中危 6.1.180-1 kernel: firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68444

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68445 中危 6.1.180-1 kernel: drm/vc4: Prevent shader BO mappings from becoming writable

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68445

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68446 中危 6.1.180-1 kernel: drm/vmwgfx: Validate vmw_surface_metadata::array_size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68446

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68447 中危 6.1.180-1 kernel: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68447

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 01:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68448 中危 6.1.180-1 kernel: ovl: check access to copy_file_range source with src mounter creds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68448

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 01:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68449 中危 6.1.180-1 kernel: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68449

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 01:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68451 中危 6.1.180-1 kernel: s390/zcrypt: Validate length for CCA ECC private key requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68451

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68452 中危 6.1.180-1 kernel: s390/zcrypt: Validate length for CCA AES cipher key requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68452

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68453 中危 6.1.180-1 kernel: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68453

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68471 中危 6.1.180-1 kernel: wifi: ieee80211: validate MLE common info length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68471

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68476 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68476

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72012 中危 6.1.180-1 kernel: tracing/osnoise: Call synchronize_rcu() when unregistering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72012

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72015 中危 6.1.180-1 kernel: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72015

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72017 中危 6.1.180-1 kernel: net: macb: drop in-flight Tx SKBs on close

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72028 中危 6.1.180-1 kernel: riscv: probes: save original sp in rethook trampoline

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72028

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72030 中危 6.1.180-1 kernel: ata: libata-core: Reject an invalid concurrent positioning ranges count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72030

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72035 中危 6.1.180-1 kernel: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72035

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72041 中危 6.1.180-1 kernel: espintcp: use sk_msg_free_partial to fix partial send

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72041

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72045 中危 6.1.180-1 kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72045

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72051 中危 6.1.180-1 kernel: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72051

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72057 中危 6.1.180-1 kernel: net/sched: act_ct: preserve tc_skb_cb across defragmentation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72057

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72062 中危 6.1.180-1 kernel: gpio: mt7621: avoid corruption of shared interrupt trigger state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72065 中危 6.1.180-1 kernel: net: mana: Validate the packet length reported by the NIC

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72065

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72069 中危 6.1.180-1 kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72069

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72070 中危 6.1.180-1 kernel: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72070

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72073 中危 6.1.180-1 kernel: mmc: vub300: fix use-after-free on probe failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72073

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72077 中危 6.1.180-1 kernel: Input: ims-pcu - fix firmware leak in async update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72077

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72096 中危 6.1.180-1 kernel: dm-verity: make error counter atomic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72096

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72098 中危 6.1.180-1 kernel: dm-verity: fix buffer overflow in FEC calculation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72098

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72099 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72099

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72106 中危 6.1.180-1 kernel: dm-ioctl: fix a possible overflow in list_version_get_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72106

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72110 中危 6.1.180-1 kernel: bpf,fork: wipe ->bpf_storage before bailouts that access it

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72110

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72113 中危 6.1.180-1 kernel: can: bcm: add missing device refcount for CAN filter removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72113

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72114 中危 6.1.180-1 kernel: can: bcm: validate frame length in bcm_rx_setup() for RTR replies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72114

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72115 中危 6.1.180-1 kernel: can: bcm: track a single source interface for ANYDEV timeout/throttle ops

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72115

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72116 中危 6.1.180-1 kernel: can: bcm: fix stale rx/tx ops after device removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72116

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72119 中危 6.1.180-1 kernel: can: bcm: extend bcm_tx_lock usage for data and timer updates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72119

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72121 中危 6.1.180-1 kernel: can: bcm: add locking when updating filter and timer values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72121

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72124 中危 6.1.180-1 kernel: can: isotp: serialize TX state transitions under so->rx_lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72124

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72125 中危 6.1.180-1 kernel: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72125

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72130 中危 6.1.180-1 kernel: nvmet-auth: reject short AUTH_RECEIVE buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72130

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72142 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72142

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72144 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72144

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72146 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72146

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72147 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72150 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72157 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72157

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72162 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72162

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72168 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72168

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72170 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: 9 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72170

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72172 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72172

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72191 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72191

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72198 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72199 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72199

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72200 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72200

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72201 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72201

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72202 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72202

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72203 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72203

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72204 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72204

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72205 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72205

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72206 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72206

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72207 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72207

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72208 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72208

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72210 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72210

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72211 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72211

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72213 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72213

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72216 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: r ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72216

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72236 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72236

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72237 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72237

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72242 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72242

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72252 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72252

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72253 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72253

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72254 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72254

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72260 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72260

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72262 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72262

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72288 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: K ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72288

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72299 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72299

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72305 中危 6.1.180-1 kernel: VDUSE: avoid leaking information to userspace

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72305

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72315 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72315

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72320 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72320

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72321 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72321

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72323 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72323

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72324 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: g ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72324

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72325 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72325

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72329 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72329

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72334 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72334

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72336 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72336

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72337 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72337

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72338 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72338

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72341 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72341

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72369 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72369

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72373 中危 6.1.180-1 kernel: afs: Fix missing NULL pointer check in afs_break_some_callbacks()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72373

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72375 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72375

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72376 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72376

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72379 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: f ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72379

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72380 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: x ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72380

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72382 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: k ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72382

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72383 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72383

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72392 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72392

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72397 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: h ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72397

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72398 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72398

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72402 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72402

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72404 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72404

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72405 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72405

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72413 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72416 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72416

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72420 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72420

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72423 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72423

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72434 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72434

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72438 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72438

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72439 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72439

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72440 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72440

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72454 中危 6.1.180-1 kernel: i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72454

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72469 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: x ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72469

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72470 中危 6.1.180-1 kernel: fs/ntfs3: resize log->one_page_buf when adopting on-disk page size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72470

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72472 中危 6.1.180-1 kernel: nfs: use nfsi->rwsem to protect traversal of the file lock list

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72472

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72488 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72488

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72493 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72493

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-72494 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: R ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74257 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74257

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74261 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74261

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74264 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74264

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74268 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74268

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74269 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74269

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74272 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74272

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74278 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74278

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74289 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74289

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74291 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74291

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74294 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74294

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74302 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74302

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74307 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: e ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74307

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74308 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: e ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74308

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74314 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74314

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74317 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74317

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74318 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74318

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74334 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: R ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74334

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74337 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74337

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74338 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74338

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74342 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: k ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74342

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74345 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: R ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74345

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74347 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74347

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74350 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74350

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74356 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74356

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74374 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74374

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74386 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74386

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74388 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74388

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74389 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: R ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74389

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74391 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74391

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74397 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: I ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74397

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74401 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74401

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74405 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: O ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74405

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74407 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: w ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74407

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74417 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74417

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74436 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: r ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74436

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74441 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74443 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74443

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74444 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74444

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74445 中危 6.1.180-1 kernel: drm/vmwgfx: reject DX_BIND_QUERY without a DX context

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74445

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74446 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74446

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74449 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74449

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74450 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74450

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74453 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74453

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74454 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: d ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74454

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74455 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74455

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74456 中危 6.1.180-1 kernel: can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74456

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74457 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74457

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74458 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74459 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74459

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74460 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74460

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74461 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74461

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74463 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74463

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74464 中危 6.1.180-1 kernel: net: openvswitch: fix skb leak on flow key update failure during ct

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74464

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74465 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74465

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74466 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74466

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74467 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74467

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74468 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: g ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74468

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74469 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74469

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74470 中危 6.1.180-1 kernel: scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74470

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74471 中危 6.1.180-1 kernel: tracing: Check return value of __register_event() in trace_module_add_events()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74471

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74472 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74472

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74473 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74473

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74474 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74474

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74475 中危 6.1.180-1 kernel: vxlan: use neigh_ha_snapshot() in route_shortcircuit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74475

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74476 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74476

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74478 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74478

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74479 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74479

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74480 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74480

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74481 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74481

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74482 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74482

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74484 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74484

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74485 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74485

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74487 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74487

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74488 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: w ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74488

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74490 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74490

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74492 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74492

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74493 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74493

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74494 中危 6.1.180-1 kernel: ksmbd: reject repeated SMB2 NEGOTIATE requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74495 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74496 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: f ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74496

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74497 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74497

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74498 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74498

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74499 中危 6.1.180-1 kernel: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74499

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74505 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: A ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74505

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74506 中危 6.1.180-1 kernel: afs: Fix UAF when sending a message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74506

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74507 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74507

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74508 中危 6.1.180-1 kernel: Bluetooth: HIDP: reject frames without a transaction header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74508

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74509 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74509

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74510 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74510

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74512 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74512

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74514 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: K ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74514

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74515 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: K ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74515

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74516 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: K ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74516

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74518 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74518

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74519 中危 6.1.180-1 kernel: pinctrl: devicetree: don't free uninitialized dev_name on error path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74519

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74521 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: k ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74521

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74522 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: k ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74522

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74523 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: q ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74523

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74525 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74525

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74527 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74527

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74536 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74536

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74537 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74537

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74540 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: B ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74540

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74543 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74543

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74544 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74544

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74546 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: h ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74547 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: h ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74547

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74548 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: f ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74549 中危 6.1.180-1 kernel: hwmon: (nct6775-core) Prevent access to unsupported weight registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74549

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74550 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74550

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74551 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: h ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74551

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74552 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: h ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74552

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74553 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: h ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74553

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74556 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74556

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74557 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74557

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74563 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: r ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74563

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74564 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74564

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74565 中危 6.1.180-1 kernel: netfilter: nf_tables: make nft_object rhltable per table

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74565

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74566 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: k ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74566

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74567 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: k ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74567

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74569 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74569

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74571 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74571

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74575 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74575

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74577 中危 6.1.180-1 In the Linux kernel, the following vulnerability has been resolved: n ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74577

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

libblkid1 CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

mount CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

mount CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

mount CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

libbz2-1.0 CVE-2026-42250 中危 1.0.8-5+b1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47

ncurses-base CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libc-bin CVE-2026-5435 中危 2.36-9+deb12u14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

ncurses-bin CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libc-bin CVE-2026-5450 中危 2.36-9+deb12u14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-5928 中危 2.36-9+deb12u14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-6238 中危 2.36-9+deb12u14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

openssh-client CVE-2026-55655 中危 1:9.2p1-2+deb12u10 openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17

openssh-client CVE-2026-59995 中危 1:9.2p1-2+deb12u10 openssh: OpenSSH: sftp client allows attacker to control downloaded file location

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59995

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:14

openssh-client CVE-2026-59996 中危 1:9.2p1-2+deb12u10 openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:14

openssh-client CVE-2026-59997 中危 1:9.2p1-2+deb12u10 openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59997

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:11

openssh-client CVE-2026-59998 中危 1:9.2p1-2+deb12u10 openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59998

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:55

openssh-client CVE-2026-60001 中危 1:9.2p1-2+deb12u10 openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60001

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:37

openssh-client CVE-2026-73282 中危 1:9.2p1-2+deb12u10 openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73282

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-11 20:18 修改: 2026-08-11 21:17

openssh-client CVE-2026-73283 中危 1:9.2p1-2+deb12u10 openssh: OpenSSH: Tunnel forwarding restriction bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73283

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-11 20:18 修改: 2026-08-11 21:17

libc-bin CVE-2026-6368 中危 2.36-9+deb12u14 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

libc-bin CVE-2026-6791 中危 2.36-9+deb12u14 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

libc-dev-bin CVE-2026-5435 中危 2.36-9+deb12u14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc-dev-bin CVE-2026-5450 中危 2.36-9+deb12u14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-dev-bin CVE-2026-5928 中危 2.36-9+deb12u14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-dev-bin CVE-2026-6238 中危 2.36-9+deb12u14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libc-dev-bin CVE-2026-6368 中危 2.36-9+deb12u14 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

libc-dev-bin CVE-2026-6791 中危 2.36-9+deb12u14 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

libc6 CVE-2026-5435 中危 2.36-9+deb12u14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

perl CVE-2025-15649 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl CVE-2026-12087 中危 5.36.0-7+deb12u3 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl CVE-2026-48959 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl CVE-2026-48961 中危 5.36.0-7+deb12u3 perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl CVE-2026-7010 中危 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01

libc6 CVE-2026-5450 中危 2.36-9+deb12u14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-5928 中危 2.36-9+deb12u14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-6238 中危 2.36-9+deb12u14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libc6 CVE-2026-6368 中危 2.36-9+deb12u14 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

libc6 CVE-2026-6791 中危 2.36-9+deb12u14 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

libc6-dev CVE-2026-5435 中危 2.36-9+deb12u14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc6-dev CVE-2026-5450 中危 2.36-9+deb12u14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6-dev CVE-2026-5928 中危 2.36-9+deb12u14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

perl-base CVE-2025-15649 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-base CVE-2026-12087 中危 5.36.0-7+deb12u3 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl-base CVE-2026-48959 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-base CVE-2026-48961 中危 5.36.0-7+deb12u3 perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-base CVE-2026-7010 中危 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01

libc6-dev CVE-2026-6238 中危 2.36-9+deb12u14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libc6-dev CVE-2026-6368 中危 2.36-9+deb12u14 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

libc6-dev CVE-2026-6791 中危 2.36-9+deb12u14 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18

bsdutils CVE-2026-3184 中危 1:2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

curl CVE-2026-10536 中危 7.88.1-10+deb12u15 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02

curl CVE-2026-11856 中危 7.88.1-10+deb12u15 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

curl CVE-2026-1965 中危 7.88.1-10+deb12u15 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

curl CVE-2026-4873 中危 7.88.1-10+deb12u15 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

perl-modules-5.36 CVE-2025-15649 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-modules-5.36 CVE-2026-12087 中危 5.36.0-7+deb12u3 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl-modules-5.36 CVE-2026-48959 中危 5.36.0-7+deb12u3 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-modules-5.36 CVE-2026-48961 中危 5.36.0-7+deb12u3 perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-modules-5.36 CVE-2026-7010 中危 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01

tar CVE-2026-18477 中危 1.34+dfsg-1.2+deb12u1 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-03 17:16 修改: 2026-08-13 16:09

tar CVE-2026-18508 中危 1.34+dfsg-1.2+deb12u1 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-03 16:16 修改: 2026-08-07 13:16

tar CVE-2026-5704 中危 1.34+dfsg-1.2+deb12u1 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59

libcurl3-gnutls CVE-2026-10536 中危 7.88.1-10+deb12u15 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02

util-linux CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

util-linux CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

util-linux CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

libcurl3-gnutls CVE-2026-11856 中危 7.88.1-10+deb12u15 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

util-linux-extra CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

util-linux-extra CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

util-linux-extra CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10

libcurl3-gnutls CVE-2026-1965 中危 7.88.1-10+deb12u15 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

zlib1g CVE-2026-27171 中危 1:1.2.13.dfsg-1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

libcurl3-gnutls CVE-2026-4873 中危 7.88.1-10+deb12u15 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

zlib1g-dev CVE-2026-27171 中危 1:1.2.13.dfsg-1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

libbinutils CVE-2025-69651 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69652 低危 2.40-2 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-7545 低危 2.40-2 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libbinutils CVE-2025-7546 低危 2.40-2 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libbinutils CVE-2025-8224 低危 2.40-2 binutils: Binutils BFD Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 06:15 修改: 2026-06-17 10:06

libbinutils CVE-2025-8225 低危 2.40-2 binutils: Binutils DWARF Section Handler Memory Leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 08:15 修改: 2026-06-17 10:06

libbinutils CVE-2026-15003 低危 2.40-2 binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 14:16 修改: 2026-07-28 17:16

libbinutils CVE-2026-18220 低危 2.40-2 binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 14:15

libbinutils CVE-2026-19548 低危 2.40-2 binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 16:16 修改: 2026-08-14 19:07

libbinutils CVE-2026-3441 低危 2.40-2 binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libbinutils CVE-2026-3442 低危 2.40-2 binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libbinutils CVE-2026-4647 低危 2.40-2 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

libbinutils CVE-2026-6844 低危 2.40-2 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

libbinutils CVE-2026-6845 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

libbinutils CVE-2026-6846 低危 2.40-2 binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-15 01:16

binutils CVE-2025-7545 低危 2.40-2 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

binutils CVE-2025-7546 低危 2.40-2 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

binutils CVE-2025-8224 低危 2.40-2 binutils: Binutils BFD Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 06:15 修改: 2026-06-17 10:06

binutils CVE-2025-8225 低危 2.40-2 binutils: Binutils DWARF Section Handler Memory Leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 08:15 修改: 2026-06-17 10:06

libblkid1 CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

libblkid1 CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

binutils CVE-2026-15003 低危 2.40-2 binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 14:16 修改: 2026-07-28 17:16

binutils CVE-2026-18220 低危 2.40-2 binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 14:15

binutils CVE-2026-19548 低危 2.40-2 binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 16:16 修改: 2026-08-14 19:07

binutils CVE-2026-3441 低危 2.40-2 binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

binutils CVE-2026-3442 低危 2.40-2 binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

binutils CVE-2026-4647 低危 2.40-2 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

binutils CVE-2026-6844 低危 2.40-2 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

libc-bin CVE-2010-4756 低危 2.36-9+deb12u14 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13

libc-bin CVE-2018-20796 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53

libc-bin CVE-2019-1010022 低危 2.36-9+deb12u14 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-bin CVE-2019-1010023 低危 2.36-9+deb12u14 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-bin CVE-2019-1010024 低危 2.36-9+deb12u14 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-bin CVE-2019-1010025 低危 2.36-9+deb12u14 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-bin CVE-2019-9192 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43

binutils CVE-2026-6845 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

binutils CVE-2026-6846 低危 2.40-2 binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-15 01:16

binutils-common CVE-2017-13716 低危 2.40-2 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

binutils-common CVE-2018-20673 低危 2.40-2 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

binutils-common CVE-2018-20712 低危 2.40-2 libiberty: heap-based buffer over-read in d_expression_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-15 00:29 修改: 2026-06-17 01:53

binutils-common CVE-2018-9996 低危 2.40-2 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-04-10 22:29 修改: 2026-06-17 02:07

libc-dev-bin CVE-2010-4756 低危 2.36-9+deb12u14 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13

libc-dev-bin CVE-2018-20796 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53

libc-dev-bin CVE-2019-1010022 低危 2.36-9+deb12u14 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-dev-bin CVE-2019-1010023 低危 2.36-9+deb12u14 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-dev-bin CVE-2019-1010024 低危 2.36-9+deb12u14 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-dev-bin CVE-2019-1010025 低危 2.36-9+deb12u14 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc-dev-bin CVE-2019-9192 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43

binutils-common CVE-2021-32256 低危 2.40-2 binutils: stack-overflow issue in demangle_type in rust-demangle.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32256

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-18 14:15 修改: 2026-06-17 03:52

binutils-common CVE-2023-1972 低危 2.40-2 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

binutils-common CVE-2024-53589 低危 2.40-2 binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53589

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-05 20:15 修改: 2026-06-17 08:09

binutils-common CVE-2024-57360 低危 2.40-2 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

binutils-common CVE-2025-0840 低危 2.40-2 binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-29 20:15 修改: 2026-06-17 08:27

binutils-common CVE-2025-11081 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

libc6 CVE-2010-4756 低危 2.36-9+deb12u14 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13

libc6 CVE-2018-20796 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53

libc6 CVE-2019-1010022 低危 2.36-9+deb12u14 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6 CVE-2019-1010023 低危 2.36-9+deb12u14 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6 CVE-2019-1010024 低危 2.36-9+deb12u14 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6 CVE-2019-1010025 低危 2.36-9+deb12u14 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6 CVE-2019-9192 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43

binutils-common CVE-2025-11082 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

binutils-common CVE-2025-11083 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

binutils-common CVE-2025-11412 低危 2.40-2 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

binutils-common CVE-2025-11413 低危 2.40-2 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

binutils-common CVE-2025-11414 低危 2.40-2 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

binutils-common CVE-2025-1147 低危 2.40-2 binutils: GNU Binutils nm nm.c internal_strlen buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libc6-dev CVE-2010-4756 低危 2.36-9+deb12u14 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13

libc6-dev CVE-2018-20796 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53

libc6-dev CVE-2019-1010022 低危 2.36-9+deb12u14 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6-dev CVE-2019-1010023 低危 2.36-9+deb12u14 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6-dev CVE-2019-1010024 低危 2.36-9+deb12u14 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6-dev CVE-2019-1010025 低危 2.36-9+deb12u14 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09

libc6-dev CVE-2019-9192 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43

libcc1-0 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libctf-nobfd0 CVE-2017-13716 低危 2.40-2 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libctf-nobfd0 CVE-2018-20673 低危 2.40-2 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

libctf-nobfd0 CVE-2018-20712 低危 2.40-2 libiberty: heap-based buffer over-read in d_expression_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-15 00:29 修改: 2026-06-17 01:53

libctf-nobfd0 CVE-2018-9996 低危 2.40-2 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-04-10 22:29 修改: 2026-06-17 02:07

libctf-nobfd0 CVE-2021-32256 低危 2.40-2 binutils: stack-overflow issue in demangle_type in rust-demangle.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32256

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-18 14:15 修改: 2026-06-17 03:52

libctf-nobfd0 CVE-2023-1972 低危 2.40-2 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

libctf-nobfd0 CVE-2024-53589 低危 2.40-2 binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53589

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-05 20:15 修改: 2026-06-17 08:09

libctf-nobfd0 CVE-2024-57360 低危 2.40-2 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

libctf-nobfd0 CVE-2025-0840 低危 2.40-2 binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-29 20:15 修改: 2026-06-17 08:27

libctf-nobfd0 CVE-2025-11081 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

libctf-nobfd0 CVE-2025-11082 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libctf-nobfd0 CVE-2025-11083 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libctf-nobfd0 CVE-2025-11412 低危 2.40-2 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libctf-nobfd0 CVE-2025-11413 低危 2.40-2 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libctf-nobfd0 CVE-2025-11414 低危 2.40-2 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

libctf-nobfd0 CVE-2025-1147 低危 2.40-2 binutils: GNU Binutils nm nm.c internal_strlen buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1148 低危 2.40-2 binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1149 低危 2.40-2 binutils: GNU Binutils ld xmalloc.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 15:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-11494 低危 2.40-2 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

libctf-nobfd0 CVE-2025-11495 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

libctf-nobfd0 CVE-2025-1150 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1151 低危 2.40-2 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1152 低危 2.40-2 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1153 低危 2.40-2 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1176 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 06:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1178 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1179 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1180 低危 2.40-2 binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1181 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-1182 低危 2.40-2 binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 09:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2025-11839 低危 2.40-2 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

libctf-nobfd0 CVE-2025-11840 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

libctf-nobfd0 CVE-2025-3198 低危 2.40-2 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

libctf-nobfd0 CVE-2025-5244 低危 2.40-2 binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 13:15 修改: 2026-06-17 09:47

libctf-nobfd0 CVE-2025-5245 低危 2.40-2 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

libctf-nobfd0 CVE-2025-66861 低危 2.40-2 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf-nobfd0 CVE-2025-66862 低危 2.40-2 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf-nobfd0 CVE-2025-66863 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf-nobfd0 CVE-2025-66864 低危 2.40-2 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf-nobfd0 CVE-2025-66865 低危 2.40-2 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf-nobfd0 CVE-2025-66866 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf-nobfd0 CVE-2025-69644 低危 2.40-2 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69645 低危 2.40-2 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69646 低危 2.40-2 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69647 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69648 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69649 低危 2.40-2 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69650 低危 2.40-2 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69651 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69652 低危 2.40-2 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-7545 低危 2.40-2 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libctf-nobfd0 CVE-2025-7546 低危 2.40-2 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libctf-nobfd0 CVE-2025-8224 低危 2.40-2 binutils: Binutils BFD Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 06:15 修改: 2026-06-17 10:06

libctf-nobfd0 CVE-2025-8225 低危 2.40-2 binutils: Binutils DWARF Section Handler Memory Leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 08:15 修改: 2026-06-17 10:06

libctf-nobfd0 CVE-2026-15003 低危 2.40-2 binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 14:16 修改: 2026-07-28 17:16

libctf-nobfd0 CVE-2026-18220 低危 2.40-2 binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 14:15

libctf-nobfd0 CVE-2026-19548 低危 2.40-2 binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 16:16 修改: 2026-08-14 19:07

libctf-nobfd0 CVE-2026-3441 低危 2.40-2 binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libctf-nobfd0 CVE-2026-3442 低危 2.40-2 binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libctf-nobfd0 CVE-2026-4647 低危 2.40-2 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

libctf-nobfd0 CVE-2026-6844 低危 2.40-2 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

libctf-nobfd0 CVE-2026-6845 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

libctf-nobfd0 CVE-2026-6846 低危 2.40-2 binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-15 01:16

libctf0 CVE-2017-13716 低危 2.40-2 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libctf0 CVE-2018-20673 低危 2.40-2 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

libctf0 CVE-2018-20712 低危 2.40-2 libiberty: heap-based buffer over-read in d_expression_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-15 00:29 修改: 2026-06-17 01:53

libctf0 CVE-2018-9996 低危 2.40-2 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-04-10 22:29 修改: 2026-06-17 02:07

libctf0 CVE-2021-32256 低危 2.40-2 binutils: stack-overflow issue in demangle_type in rust-demangle.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32256

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-18 14:15 修改: 2026-06-17 03:52

libctf0 CVE-2023-1972 低危 2.40-2 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

libctf0 CVE-2024-53589 低危 2.40-2 binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53589

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-05 20:15 修改: 2026-06-17 08:09

libctf0 CVE-2024-57360 低危 2.40-2 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

libctf0 CVE-2025-0840 低危 2.40-2 binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-29 20:15 修改: 2026-06-17 08:27

libctf0 CVE-2025-11081 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

libctf0 CVE-2025-11082 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libctf0 CVE-2025-11083 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libctf0 CVE-2025-11412 低危 2.40-2 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libctf0 CVE-2025-11413 低危 2.40-2 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libctf0 CVE-2025-11414 低危 2.40-2 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

libctf0 CVE-2025-1147 低危 2.40-2 binutils: GNU Binutils nm nm.c internal_strlen buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1148 低危 2.40-2 binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1149 低危 2.40-2 binutils: GNU Binutils ld xmalloc.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 15:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-11494 低危 2.40-2 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

libctf0 CVE-2025-11495 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

libctf0 CVE-2025-1150 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1151 低危 2.40-2 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1152 低危 2.40-2 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1153 低危 2.40-2 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1176 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 06:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1178 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1179 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1180 低危 2.40-2 binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1181 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-1182 低危 2.40-2 binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 09:15 修改: 2026-06-17 08:38

libctf0 CVE-2025-11839 低危 2.40-2 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

libctf0 CVE-2025-11840 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

libctf0 CVE-2025-3198 低危 2.40-2 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

libctf0 CVE-2025-5244 低危 2.40-2 binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 13:15 修改: 2026-06-17 09:47

libctf0 CVE-2025-5245 低危 2.40-2 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

libctf0 CVE-2025-66861 低危 2.40-2 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf0 CVE-2025-66862 低危 2.40-2 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf0 CVE-2025-66863 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf0 CVE-2025-66864 低危 2.40-2 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf0 CVE-2025-66865 低危 2.40-2 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf0 CVE-2025-66866 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libctf0 CVE-2025-69644 低危 2.40-2 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69645 低危 2.40-2 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69646 低危 2.40-2 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69647 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf0 CVE-2025-69648 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf0 CVE-2025-69649 低危 2.40-2 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69650 低危 2.40-2 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69651 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69652 低危 2.40-2 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-7545 低危 2.40-2 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libctf0 CVE-2025-7546 低危 2.40-2 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libctf0 CVE-2025-8224 低危 2.40-2 binutils: Binutils BFD Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 06:15 修改: 2026-06-17 10:06

libctf0 CVE-2025-8225 低危 2.40-2 binutils: Binutils DWARF Section Handler Memory Leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 08:15 修改: 2026-06-17 10:06

libctf0 CVE-2026-15003 低危 2.40-2 binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 14:16 修改: 2026-07-28 17:16

libctf0 CVE-2026-18220 低危 2.40-2 binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 14:15

libctf0 CVE-2026-19548 低危 2.40-2 binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 16:16 修改: 2026-08-14 19:07

libctf0 CVE-2026-3441 低危 2.40-2 binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libctf0 CVE-2026-3442 低危 2.40-2 binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libctf0 CVE-2026-4647 低危 2.40-2 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

libctf0 CVE-2026-6844 低危 2.40-2 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

libctf0 CVE-2026-6845 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

libctf0 CVE-2026-6846 低危 2.40-2 binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-15 01:16

binutils-common CVE-2025-1148 低危 2.40-2 binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1149 低危 2.40-2 binutils: GNU Binutils ld xmalloc.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 15:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-11494 低危 2.40-2 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

binutils-common CVE-2025-11495 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

binutils-common CVE-2025-1150 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1151 低危 2.40-2 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1152 低危 2.40-2 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1153 低危 2.40-2 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1176 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 06:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1178 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1179 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1180 低危 2.40-2 binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1181 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

binutils-common CVE-2025-1182 低危 2.40-2 binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 09:15 修改: 2026-06-17 08:38

libcurl3-gnutls CVE-2024-2379 低危 7.88.1-10+deb12u15 curl: QUIC certificate check bypass with wolfSSL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

libcurl3-gnutls CVE-2025-0725 低危 7.88.1-10+deb12u15 libcurl: Buffer Overflow in libcurl via zlib Integer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0725

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:27

libcurl3-gnutls CVE-2025-10966 低危 7.88.1-10+deb12u15 curl: Curl missing SFTP host verification with wolfSSH backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29

libcurl3-gnutls CVE-2025-14017 低危 7.88.1-10+deb12u15 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

libcurl3-gnutls CVE-2025-15079 低危 7.88.1-10+deb12u15 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libcurl3-gnutls CVE-2025-15224 低危 7.88.1-10+deb12u15 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libcurl3-gnutls CVE-2026-9547 低危 7.88.1-10+deb12u15 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

binutils-common CVE-2025-11839 低危 2.40-2 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

binutils-common CVE-2025-11840 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

binutils-common CVE-2025-3198 低危 2.40-2 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

binutils-common CVE-2025-5244 低危 2.40-2 binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 13:15 修改: 2026-06-17 09:47

binutils-common CVE-2025-5245 低危 2.40-2 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

binutils-common CVE-2025-66861 低危 2.40-2 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-common CVE-2025-66862 低危 2.40-2 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-common CVE-2025-66863 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-common CVE-2025-66864 低危 2.40-2 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-common CVE-2025-66865 低危 2.40-2 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-common CVE-2025-66866 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-common CVE-2025-69644 低危 2.40-2 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69645 低危 2.40-2 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69646 低危 2.40-2 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libcurl4 CVE-2024-2379 低危 7.88.1-10+deb12u15 curl: QUIC certificate check bypass with wolfSSL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

libcurl4 CVE-2025-0725 低危 7.88.1-10+deb12u15 libcurl: Buffer Overflow in libcurl via zlib Integer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0725

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:27

libcurl4 CVE-2025-10966 低危 7.88.1-10+deb12u15 curl: Curl missing SFTP host verification with wolfSSH backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29

libcurl4 CVE-2025-14017 低危 7.88.1-10+deb12u15 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

libcurl4 CVE-2025-15079 低危 7.88.1-10+deb12u15 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libcurl4 CVE-2025-15224 低危 7.88.1-10+deb12u15 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libcurl4 CVE-2026-9547 低危 7.88.1-10+deb12u15 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

binutils-common CVE-2025-69647 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-common CVE-2025-69648 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-common CVE-2025-69649 低危 2.40-2 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69650 低危 2.40-2 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69651 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69652 低危 2.40-2 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-7545 低危 2.40-2 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

binutils-common CVE-2025-7546 低危 2.40-2 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

binutils-common CVE-2025-8224 低危 2.40-2 binutils: Binutils BFD Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 06:15 修改: 2026-06-17 10:06

binutils-common CVE-2025-8225 低危 2.40-2 binutils: Binutils DWARF Section Handler Memory Leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 08:15 修改: 2026-06-17 10:06

binutils-common CVE-2026-15003 低危 2.40-2 binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 14:16 修改: 2026-07-28 17:16

binutils-common CVE-2026-18220 低危 2.40-2 binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 14:15

binutils-common CVE-2026-19548 低危 2.40-2 binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 16:16 修改: 2026-08-14 19:07

binutils-common CVE-2026-3441 低危 2.40-2 binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

binutils-common CVE-2026-3442 低危 2.40-2 binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

binutils-common CVE-2026-4647 低危 2.40-2 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

binutils-common CVE-2026-6844 低危 2.40-2 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

binutils-common CVE-2026-6845 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

binutils-common CVE-2026-6846 低危 2.40-2 binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-15 01:16

binutils-x86-64-linux-gnu CVE-2017-13716 低危 2.40-2 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

binutils-x86-64-linux-gnu CVE-2018-20673 低危 2.40-2 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

binutils-x86-64-linux-gnu CVE-2018-20712 低危 2.40-2 libiberty: heap-based buffer over-read in d_expression_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-15 00:29 修改: 2026-06-17 01:53

libexpat1 CVE-2023-52426 低危 2.5.0-1+deb12u2 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42

libexpat1 CVE-2024-28757 低危 2.5.0-1+deb12u2 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-10 05:15 修改: 2026-06-17 07:21

libexpat1 CVE-2026-24515 低危 2.5.0-1+deb12u2 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23

libexpat1 CVE-2026-41080 低危 2.5.0-1+deb12u2 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18

libgcc-12-dev CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libgcc-s1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libgcrypt20 CVE-2018-6829 低危 1.10.1-3+deb12u1 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2018-02-07 23:29 修改: 2026-06-17 02:02

libgcrypt20 CVE-2024-2236 低危 1.10.1-3+deb12u1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

libgnutls30 CVE-2011-3389 低危 3.7.9-2+deb12u7 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2011-09-06 19:55 修改: 2026-04-29 01:13

libgomp1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libgprofng0 CVE-2017-13716 低危 2.40-2 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libgprofng0 CVE-2018-20673 低危 2.40-2 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

libgprofng0 CVE-2018-20712 低危 2.40-2 libiberty: heap-based buffer over-read in d_expression_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-15 00:29 修改: 2026-06-17 01:53

libgprofng0 CVE-2018-9996 低危 2.40-2 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-04-10 22:29 修改: 2026-06-17 02:07

libgprofng0 CVE-2021-32256 低危 2.40-2 binutils: stack-overflow issue in demangle_type in rust-demangle.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32256

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-18 14:15 修改: 2026-06-17 03:52

libgprofng0 CVE-2023-1972 低危 2.40-2 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

libgprofng0 CVE-2024-53589 低危 2.40-2 binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53589

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-05 20:15 修改: 2026-06-17 08:09

libgprofng0 CVE-2024-57360 低危 2.40-2 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

libgprofng0 CVE-2025-0840 低危 2.40-2 binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-29 20:15 修改: 2026-06-17 08:27

libgprofng0 CVE-2025-11081 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

libgprofng0 CVE-2025-11082 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libgprofng0 CVE-2025-11083 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libgprofng0 CVE-2025-11412 低危 2.40-2 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libgprofng0 CVE-2025-11413 低危 2.40-2 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libgprofng0 CVE-2025-11414 低危 2.40-2 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

libgprofng0 CVE-2025-1147 低危 2.40-2 binutils: GNU Binutils nm nm.c internal_strlen buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1148 低危 2.40-2 binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1149 低危 2.40-2 binutils: GNU Binutils ld xmalloc.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 15:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-11494 低危 2.40-2 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

libgprofng0 CVE-2025-11495 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

libgprofng0 CVE-2025-1150 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1151 低危 2.40-2 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1152 低危 2.40-2 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1153 低危 2.40-2 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1176 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 06:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1178 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1179 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1180 低危 2.40-2 binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1181 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-1182 低危 2.40-2 binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 09:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2025-11839 低危 2.40-2 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

libgprofng0 CVE-2025-11840 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

libgprofng0 CVE-2025-3198 低危 2.40-2 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

libgprofng0 CVE-2025-5244 低危 2.40-2 binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 13:15 修改: 2026-06-17 09:47

libgprofng0 CVE-2025-5245 低危 2.40-2 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

libgprofng0 CVE-2025-66861 低危 2.40-2 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libgprofng0 CVE-2025-66862 低危 2.40-2 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libgprofng0 CVE-2025-66863 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libgprofng0 CVE-2025-66864 低危 2.40-2 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libgprofng0 CVE-2025-66865 低危 2.40-2 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libgprofng0 CVE-2025-66866 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libgprofng0 CVE-2025-69644 低危 2.40-2 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69645 低危 2.40-2 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69646 低危 2.40-2 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69647 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69648 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69649 低危 2.40-2 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69650 低危 2.40-2 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69651 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69652 低危 2.40-2 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-7545 低危 2.40-2 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libgprofng0 CVE-2025-7546 低危 2.40-2 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

libgprofng0 CVE-2025-8224 低危 2.40-2 binutils: Binutils BFD Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 06:15 修改: 2026-06-17 10:06

libgprofng0 CVE-2025-8225 低危 2.40-2 binutils: Binutils DWARF Section Handler Memory Leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 08:15 修改: 2026-06-17 10:06

libgprofng0 CVE-2026-15003 低危 2.40-2 binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 14:16 修改: 2026-07-28 17:16

libgprofng0 CVE-2026-18220 低危 2.40-2 binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 14:15

libgprofng0 CVE-2026-19548 低危 2.40-2 binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 16:16 修改: 2026-08-14 19:07

libgprofng0 CVE-2026-3441 低危 2.40-2 binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libgprofng0 CVE-2026-3442 低危 2.40-2 binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libgprofng0 CVE-2026-4647 低危 2.40-2 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

libgprofng0 CVE-2026-6844 低危 2.40-2 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

libgprofng0 CVE-2026-6845 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

libgprofng0 CVE-2026-6846 低危 2.40-2 binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-15 01:16

libgssapi-krb5-2 CVE-2018-5709 低危 1.20.1-2+deb12u5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libgssapi-krb5-2 CVE-2024-26458 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libgssapi-krb5-2 CVE-2024-26461 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libgssapi-krb5-2 CVE-2026-11850 低危 1.20.1-2+deb12u5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

libip4tc2 CVE-2012-2663 低危 1.8.9-2 iptables: --syn flag bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13

libip6tc2 CVE-2012-2663 低危 1.8.9-2 iptables: --syn flag bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13

libitm1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libjq1 CVE-2024-23337 低危 1.6-2.1+deb12u2 jq: jq has signed integer overflow in jv.c:jvp_array_write

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23337

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-21 15:16 修改: 2026-06-17 07:12

libjq1 CVE-2025-9403 低危 1.6-2.1+deb12u2 jq: assertion failure in run_jq_tests() of the file jq_test.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9403

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-25 03:15 修改: 2026-06-17 10:08

libjq1 CVE-2026-40612 低危 1.6-2.1+deb12u2 jq: stack overflow via unbounded recursion in jv_contains

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40612

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:45

libk5crypto3 CVE-2018-5709 低危 1.20.1-2+deb12u5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libk5crypto3 CVE-2024-26458 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libk5crypto3 CVE-2024-26461 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libk5crypto3 CVE-2026-11850 低危 1.20.1-2+deb12u5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

libkrb5-3 CVE-2018-5709 低危 1.20.1-2+deb12u5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libkrb5-3 CVE-2024-26458 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5-3 CVE-2024-26461 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5-3 CVE-2026-11850 低危 1.20.1-2+deb12u5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

libkrb5support0 CVE-2018-5709 低危 1.20.1-2+deb12u5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libkrb5support0 CVE-2024-26458 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5support0 CVE-2024-26461 低危 1.20.1-2+deb12u5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5support0 CVE-2026-11850 低危 1.20.1-2+deb12u5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

binutils-x86-64-linux-gnu CVE-2018-9996 低危 2.40-2 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-04-10 22:29 修改: 2026-06-17 02:07

libldap-2.5-0 CVE-2015-3276 低危 2.5.13+dfsg-5 openldap: incorrect multi-keyword mode cipherstring parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2015-12-07 20:59 修改: 2026-05-06 22:30

libldap-2.5-0 CVE-2017-14159 低危 2.5.13+dfsg-5 openldap: Privilege escalation via PID file manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-09-05 18:29 修改: 2026-06-17 01:05

libldap-2.5-0 CVE-2017-17740 低危 2.5.13+dfsg-5 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-12-18 06:29 修改: 2026-06-17 01:11

libldap-2.5-0 CVE-2020-15719 低危 2.5.13+dfsg-5 openldap: Certificate validation incorrectly matches name against CN-ID

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-07-14 14:15 修改: 2026-06-17 02:57

libldap-2.5-0 CVE-2026-22185 低危 2.5.13+dfsg-5 OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19

liblsan0 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

binutils-x86-64-linux-gnu CVE-2021-32256 低危 2.40-2 binutils: stack-overflow issue in demangle_type in rust-demangle.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32256

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-18 14:15 修改: 2026-06-17 03:52

binutils-x86-64-linux-gnu CVE-2023-1972 低危 2.40-2 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

binutils-x86-64-linux-gnu CVE-2024-53589 低危 2.40-2 binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53589

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-05 20:15 修改: 2026-06-17 08:09

binutils-x86-64-linux-gnu CVE-2024-57360 低危 2.40-2 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

libmount1 CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

libmount1 CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

binutils-x86-64-linux-gnu CVE-2025-0840 低危 2.40-2 binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-29 20:15 修改: 2026-06-17 08:27

binutils-x86-64-linux-gnu CVE-2025-11081 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

libncurses-dev CVE-2025-6141 低危 6.4-4 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

binutils-x86-64-linux-gnu CVE-2025-11082 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

binutils-x86-64-linux-gnu CVE-2025-11083 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libncurses6 CVE-2025-6141 低危 6.4-4 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

binutils-x86-64-linux-gnu CVE-2025-11412 低危 2.40-2 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

binutils-x86-64-linux-gnu CVE-2025-11413 低危 2.40-2 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libncursesw6 CVE-2025-6141 低危 6.4-4 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

binutils-x86-64-linux-gnu CVE-2025-11414 低危 2.40-2 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

binutils-x86-64-linux-gnu CVE-2025-1147 低危 2.40-2 binutils: GNU Binutils nm nm.c internal_strlen buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1148 低危 2.40-2 binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1149 低危 2.40-2 binutils: GNU Binutils ld xmalloc.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 15:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-11494 低危 2.40-2 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

binutils-x86-64-linux-gnu CVE-2025-11495 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

binutils-x86-64-linux-gnu CVE-2025-1150 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1151 低危 2.40-2 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1152 低危 2.40-2 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1153 低危 2.40-2 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1176 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 06:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1178 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1179 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1180 低危 2.40-2 binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1181 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-1182 低危 2.40-2 binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 09:15 修改: 2026-06-17 08:38

binutils-x86-64-linux-gnu CVE-2025-11839 低危 2.40-2 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

binutils-x86-64-linux-gnu CVE-2025-11840 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

binutils-x86-64-linux-gnu CVE-2025-3198 低危 2.40-2 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

binutils-x86-64-linux-gnu CVE-2025-5244 低危 2.40-2 binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 13:15 修改: 2026-06-17 09:47

binutils-x86-64-linux-gnu CVE-2025-5245 低危 2.40-2 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

binutils-x86-64-linux-gnu CVE-2025-66861 低危 2.40-2 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-x86-64-linux-gnu CVE-2025-66862 低危 2.40-2 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-x86-64-linux-gnu CVE-2025-66863 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libperl5.36 CVE-2011-4116 低危 5.36.0-7+deb12u3 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04

libperl5.36 CVE-2023-31486 低危 5.36.0-7+deb12u3 http-tiny: perl: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57

libpopt0 CVE-2026-18739 低危 1.19+dfsg-1 popt-devel: popt-static: Off-by-one in poptStuffArgs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18739

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-04 06:16 修改: 2026-08-06 15:37

libpopt0 CVE-2026-18839 低危 1.19+dfsg-1 popt-devel: popt-static: size_t underflow in singleOptionHelp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-05 21:16 修改: 2026-08-06 15:37

libquadmath0 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

binutils-x86-64-linux-gnu CVE-2025-66864 低危 2.40-2 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-x86-64-linux-gnu CVE-2025-66865 低危 2.40-2 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-x86-64-linux-gnu CVE-2025-66866 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils-x86-64-linux-gnu CVE-2025-69644 低危 2.40-2 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libsmartcols1 CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

libsmartcols1 CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

binutils-x86-64-linux-gnu CVE-2025-69645 低危 2.40-2 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-x86-64-linux-gnu CVE-2025-69646 低危 2.40-2 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-x86-64-linux-gnu CVE-2025-69647 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-x86-64-linux-gnu CVE-2025-69648 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-x86-64-linux-gnu CVE-2025-69649 低危 2.40-2 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils-x86-64-linux-gnu CVE-2025-69650 低危 2.40-2 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libsqlite3-0 CVE-2021-45346 低危 3.40.1-2+deb12u2 sqlite: crafted SQL query allows a malicious user to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-02-14 19:15 修改: 2026-06-17 04:13

libsqlite3-0 CVE-2025-29088 低危 3.40.1-2+deb12u2 sqlite: Denial of Service in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29088

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-10 14:15 修改: 2026-06-17 09:05

libsqlite3-0 CVE-2025-70873 低危 3.40.1-2+deb12u2 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03

binutils-x86-64-linux-gnu CVE-2025-69651 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-x86-64-linux-gnu CVE-2025-69652 低危 2.40-2 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils-x86-64-linux-gnu CVE-2025-7545 低危 2.40-2 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

binutils-x86-64-linux-gnu CVE-2025-7546 低危 2.40-2 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

binutils-x86-64-linux-gnu CVE-2025-8224 低危 2.40-2 binutils: Binutils BFD Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 06:15 修改: 2026-06-17 10:06

binutils-x86-64-linux-gnu CVE-2025-8225 低危 2.40-2 binutils: Binutils DWARF Section Handler Memory Leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8225

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-07-27 08:15 修改: 2026-06-17 10:06

binutils-x86-64-linux-gnu CVE-2026-15003 低危 2.40-2 binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15003

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-27 14:16 修改: 2026-07-28 17:16

libssl-dev CVE-2025-27587 低危 3.0.20-1~deb12u2 OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03

libssl-dev CVE-2026-42767 低危 3.0.20-1~deb12u2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

binutils-x86-64-linux-gnu CVE-2026-18220 低危 2.40-2 binutils: binutils: Out-of-bounds write in BFD DLX ELF backend relocation processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18220

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-29 11:16 修改: 2026-07-30 14:15

libssl3 CVE-2025-27587 低危 3.0.20-1~deb12u2 OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03

libssl3 CVE-2026-42767 低危 3.0.20-1~deb12u2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libstdc++-12-dev CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libstdc++6 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

binutils-x86-64-linux-gnu CVE-2026-19548 低危 2.40-2 binutils: binutils: Multiple Use-After-Free in add_archive_element via LTO plugin processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19548

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 16:16 修改: 2026-08-14 19:07

binutils-x86-64-linux-gnu CVE-2026-3441 低危 2.40-2 binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

libsystemd0 CVE-2013-4392 低危 252.39-1~deb12u2 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13

libsystemd0 CVE-2023-31437 低危 252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56

libsystemd0 CVE-2023-31438 低危 252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56

libsystemd0 CVE-2023-31439 低危 252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56

libsystemd0 CVE-2026-40228 低危 252.39-1~deb12u2 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtasn1-6 CVE-2025-13151 低危 4.19.0-2+deb12u1 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

binutils-x86-64-linux-gnu CVE-2026-3442 低危 2.40-2 binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-16 14:19 修改: 2026-07-13 22:16

binutils-x86-64-linux-gnu CVE-2026-4647 低危 2.40-2 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

libtinfo6 CVE-2025-6141 低危 6.4-4 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

libtsan2 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libubsan1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

binutils-x86-64-linux-gnu CVE-2026-6844 低危 2.40-2 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

binutils-x86-64-linux-gnu CVE-2026-6845 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

libudev1 CVE-2013-4392 低危 252.39-1~deb12u2 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13

libudev1 CVE-2023-31437 低危 252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56

libudev1 CVE-2023-31438 低危 252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56

libudev1 CVE-2023-31439 低危 252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56

libudev1 CVE-2026-40228 低危 252.39-1~deb12u2 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

binutils-x86-64-linux-gnu CVE-2026-6846 低危 2.40-2 binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 09:16 修改: 2026-07-15 01:16

apt CVE-2011-3374 低危 2.6.1 It was found that apt-key in apt, all versions, do not correctly valid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30

bash TEMP-0841856-B18BAF 低危 5.2.15-2+b13 [Privilege escalation possible to other user than root]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

binutils CVE-2017-13716 低危 2.40-2 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libuuid1 CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

libuuid1 CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

libxtables12 CVE-2012-2663 低危 1.8.9-2 iptables: --syn flag bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13

binutils CVE-2018-20673 低危 2.40-2 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

binutils CVE-2018-20712 低危 2.40-2 libiberty: heap-based buffer over-read in d_expression_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-15 00:29 修改: 2026-06-17 01:53

binutils CVE-2018-9996 低危 2.40-2 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-04-10 22:29 修改: 2026-06-17 02:07

bsdutils CVE-2022-0563 低危 1:2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

bsdutils CVE-2025-14104 低危 1:2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

binutils CVE-2021-32256 低危 2.40-2 binutils: stack-overflow issue in demangle_type in rust-demangle.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32256

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-18 14:15 修改: 2026-06-17 03:52

coreutils CVE-2016-2781 低危 9.1-1 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

coreutils CVE-2017-18018 低危 9.1-1 coreutils: race condition vulnerability in chown and chgrp

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2018-01-04 04:29 修改: 2026-06-17 01:12

coreutils CVE-2025-5278 低危 9.1-1 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-05-27 21:15 修改: 2026-08-17 13:16

coreutils CVE-2026-56391 低危 9.1-1 coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28

coreutils CVE-2026-56392 低危 9.1-1 coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28

cpp-12 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

binutils CVE-2023-1972 低危 2.40-2 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

binutils CVE-2024-53589 低危 2.40-2 binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53589

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-05 20:15 修改: 2026-06-17 08:09

binutils CVE-2024-57360 低危 2.40-2 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

binutils CVE-2025-0840 低危 2.40-2 binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-29 20:15 修改: 2026-06-17 08:27

binutils CVE-2025-11081 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

binutils CVE-2025-11082 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

binutils CVE-2025-11083 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

binutils CVE-2025-11412 低危 2.40-2 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

binutils CVE-2025-11413 低危 2.40-2 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

binutils CVE-2025-11414 低危 2.40-2 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

binutils CVE-2025-1147 低危 2.40-2 binutils: GNU Binutils nm nm.c internal_strlen buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

binutils CVE-2025-1148 低危 2.40-2 binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

binutils CVE-2025-1149 低危 2.40-2 binutils: GNU Binutils ld xmalloc.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 15:15 修改: 2026-06-17 08:38

binutils CVE-2025-11494 低危 2.40-2 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

curl CVE-2024-2379 低危 7.88.1-10+deb12u15 curl: QUIC certificate check bypass with wolfSSL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

curl CVE-2025-0725 低危 7.88.1-10+deb12u15 libcurl: Buffer Overflow in libcurl via zlib Integer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0725

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:27

curl CVE-2025-10966 低危 7.88.1-10+deb12u15 curl: Curl missing SFTP host verification with wolfSSH backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29

curl CVE-2025-14017 低危 7.88.1-10+deb12u15 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

curl CVE-2025-15079 低危 7.88.1-10+deb12u15 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

curl CVE-2025-15224 低危 7.88.1-10+deb12u15 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

curl CVE-2026-9547 低危 7.88.1-10+deb12u15 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

diffutils CVE-2026-53910 低危 1:3.8-4 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16

binutils CVE-2025-11495 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

binutils CVE-2025-1150 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

dirmngr CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

dirmngr CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-1151 低危 2.40-2 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

g++-12 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

gcc-12 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

gcc-12-base CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

git CVE-2018-1000021 低危 1:2.39.5-0+deb12u3 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32

git CVE-2022-24975 低危 1:2.39.5-0+deb12u3 git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed"

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-02-11 20:15 修改: 2026-06-17 04:32

git CVE-2024-52005 低危 1:2.39.5-0+deb12u3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06

binutils CVE-2025-1152 低危 2.40-2 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

git-man CVE-2018-1000021 低危 1:2.39.5-0+deb12u3 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32

git-man CVE-2022-24975 低危 1:2.39.5-0+deb12u3 git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed"

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-02-11 20:15 修改: 2026-06-17 04:32

git-man CVE-2024-52005 低危 1:2.39.5-0+deb12u3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06

binutils CVE-2025-1153 低危 2.40-2 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

binutils CVE-2025-1176 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 06:15 修改: 2026-06-17 08:38

gnupg CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gnupg CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-1178 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

binutils CVE-2025-1179 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

gnupg-l10n CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gnupg-l10n CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-1180 低危 2.40-2 binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

binutils CVE-2025-1181 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

gnupg-utils CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gnupg-utils CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-1182 低危 2.40-2 binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 09:15 修改: 2026-06-17 08:38

binutils CVE-2025-11839 低危 2.40-2 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

binutils CVE-2025-11840 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

binutils CVE-2025-3198 低危 2.40-2 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

gpg CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gpg CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-5244 低危 2.40-2 binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 13:15 修改: 2026-06-17 09:47

binutils CVE-2025-5245 低危 2.40-2 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

gpg-agent CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gpg-agent CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-66861 低危 2.40-2 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils CVE-2025-66862 低危 2.40-2 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

gpg-wks-client CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gpg-wks-client CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-66863 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils CVE-2025-66864 低危 2.40-2 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

linux-libc-dev CVE-2004-0230 低危 6.1.180-1 TCP, when using a large Window Size, makes it easier for remote attack ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2004-0230

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2004-08-18 04:00 修改: 2025-05-02 16:40

linux-libc-dev CVE-2005-3660 低危 6.1.180-1 Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-3660

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2005-12-22 23:03 修改: 2026-04-16 00:27

linux-libc-dev CVE-2007-3719 低危 6.1.180-1 kernel: secretly Monopolizing the CPU Without Superuser Privileges

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-3719

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2007-07-12 16:30 修改: 2026-04-23 00:35

linux-libc-dev CVE-2008-2544 低危 6.1.180-1 kernel: mounting proc readonly on a different mount point silently mounts it rw if the /proc mount is rw

漏洞详情: https://avd.aquasec.com/nvd/cve-2008-2544

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2021-05-27 13:15 修改: 2024-11-21 00:47

linux-libc-dev CVE-2008-4609 低危 6.1.180-1 kernel: TCP protocol vulnerabilities from Outpost24

漏洞详情: https://avd.aquasec.com/nvd/cve-2008-4609

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2008-10-20 17:59 修改: 2026-04-23 00:35

linux-libc-dev CVE-2010-4563 低危 6.1.180-1 kernel: ipv6: sniffer detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4563

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2012-02-02 17:55 修改: 2026-04-29 01:13

linux-libc-dev CVE-2010-5321 低危 6.1.180-1 kernel: v4l: videobuf: hotfix a bug on multiple calls to mmap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-5321

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-04-24 06:59 修改: 2026-05-13 00:24

linux-libc-dev CVE-2011-4915 低危 6.1.180-1 fs/proc/base.c in the Linux kernel through 3.1 allows local users to o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4915

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-02-20 18:15 修改: 2024-11-21 01:33

linux-libc-dev CVE-2011-4916 低危 6.1.180-1 Linux kernel through 3.1 allows local users to obtain sensitive keystr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4916

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-07-12 21:15 修改: 2024-11-21 01:33

linux-libc-dev CVE-2011-4917 低危 6.1.180-1 In the Linux kernel through 3.1 there is an information disclosure iss ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4917

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-04-18 17:15 修改: 2024-11-21 01:33

linux-libc-dev CVE-2012-4542 低危 6.1.180-1 kernel: block: default SCSI command filter does not accomodate commands overlap across device classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-4542

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2013-02-28 19:55 修改: 2026-04-29 01:13

linux-libc-dev CVE-2014-9892 低危 6.1.180-1 The snd_compr_tstamp function in sound/core/compress_offload.c in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9892

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2016-08-06 10:59 修改: 2026-05-06 22:30

linux-libc-dev CVE-2014-9900 低危 6.1.180-1 kernel: Info leak in uninitialized structure ethtool_wolinfo in ethtool_get_wol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9900

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2016-08-06 10:59 修改: 2026-05-06 22:30

linux-libc-dev CVE-2015-2877 低危 6.1.180-1 Kernel: Cross-VM ASL INtrospection (CAIN)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2877

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-03-03 11:59 修改: 2026-05-13 00:24

linux-libc-dev CVE-2016-10723 低危 6.1.180-1 An issue was discovered in the Linux kernel through 4.17.2. Since the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10723

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-06-21 13:29 修改: 2026-06-17 00:40

linux-libc-dev CVE-2016-8660 低危 6.1.180-1 kernel: xfs: local DoS due to a page lock order bug in the XFS seek hole/data implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8660

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2016-10-16 21:59 修改: 2026-06-17 00:54

linux-libc-dev CVE-2017-0630 低危 6.1.180-1 kernel: Information disclosure vulnerability in kernel trace subsystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-0630

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-05-12 15:29 修改: 2026-06-17 00:58

linux-libc-dev CVE-2017-13693 低危 6.1.180-1 kernel: ACPI operand cache leak in dsutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13693

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-25 08:29 修改: 2026-06-17 01:04

linux-libc-dev CVE-2017-13694 低危 6.1.180-1 kernel: ACPI node and node_ext cache leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13694

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-25 08:29 修改: 2026-06-17 01:05

linux-libc-dev CVE-2018-1121 低危 6.1.180-1 procps: process hiding through race condition enumerating /proc

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1121

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-06-13 20:29 修改: 2026-06-17 01:50

linux-libc-dev CVE-2018-12928 低危 6.1.180-1 kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12928

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-06-28 14:29 修改: 2026-06-17 01:38

linux-libc-dev CVE-2018-17977 低危 6.1.180-1 kernel: Mishandled interactions among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17977

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-10-08 17:29 修改: 2026-06-17 01:46

linux-libc-dev CVE-2019-11191 低危 6.1.180-1 kernel: race condition in load_aout_binary() allows local users to bypass ASLR on setuid a.out programs

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11191

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-04-12 00:29 修改: 2026-06-17 02:12

linux-libc-dev CVE-2019-12378 低危 6.1.180-1 kernel: unchecked kmalloc of new_ra in ip6_ra_control leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12378

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-05-28 03:29 修改: 2026-06-17 02:14

linux-libc-dev CVE-2019-12379 低危 6.1.180-1 kernel: memory leak in con_insert_unipair in drivers/tty/vt/consolemap.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12379

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-05-28 03:29 修改: 2026-06-17 02:14

linux-libc-dev CVE-2019-12380 低危 6.1.180-1 kernel: memory allocation failure in the efi subsystem leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12380

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-05-28 03:29 修改: 2026-06-17 02:14

linux-libc-dev CVE-2019-12381 低危 6.1.180-1 kernel: unchecked kmalloc of new_ra in ip_ra_control leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12381

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-05-28 03:29 修改: 2026-06-17 02:14

linux-libc-dev CVE-2019-12382 低危 6.1.180-1 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12382

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-05-28 03:29 修改: 2026-06-17 02:14

linux-libc-dev CVE-2019-12455 低危 6.1.180-1 kernel: null pointer dereference in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c causing denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12455

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-05-30 04:29 修改: 2026-06-17 02:14

linux-libc-dev CVE-2019-12456 低危 6.1.180-1 kernel: double fetch in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12456

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-05-30 14:29 修改: 2026-06-17 02:14

linux-libc-dev CVE-2019-16229 低危 6.1.180-1 kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16229

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-09-11 16:15 修改: 2026-06-17 02:21

linux-libc-dev CVE-2019-16230 低危 6.1.180-1 kernel: null pointer dereference in drivers/gpu/drm/radeon/radeon_display.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16230

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-09-11 16:15 修改: 2026-06-17 02:21

linux-libc-dev CVE-2019-16231 低危 6.1.180-1 kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16231

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-09-11 16:15 修改: 2026-06-17 02:21

linux-libc-dev CVE-2019-16232 低危 6.1.180-1 kernel: null-pointer dereference in drivers/net/wireless/marvell/libertas/if_sdio.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16232

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-09-11 16:15 修改: 2026-06-17 02:21

linux-libc-dev CVE-2019-16233 低危 6.1.180-1 kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16233

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-09-11 16:15 修改: 2026-06-17 02:21

linux-libc-dev CVE-2019-16234 低危 6.1.180-1 kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16234

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-09-11 16:15 修改: 2026-06-17 02:21

linux-libc-dev CVE-2019-19070 低危 6.1.180-1 kernel: A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c allows for a DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19070

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-11-18 06:15 修改: 2026-06-17 02:26

linux-libc-dev CVE-2019-19378 低危 6.1.180-1 kernel: out-of-bounds write in index_rbio_pages in fs/btrfs/raid56.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19378

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-11-29 17:15 修改: 2026-06-17 02:26

linux-libc-dev CVE-2020-11725 低危 6.1.180-1 kernel: improper handling of private_size*count multiplication due to count=info->owner typo

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11725

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-04-12 22:15 修改: 2026-06-17 02:50

linux-libc-dev CVE-2020-35501 低危 6.1.180-1 kernel: audit not logging access to syscall open_by_handle_at for users with CAP_DAC_READ_SEARCH capability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35501

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-30 16:15 修改: 2026-06-17 03:13

linux-libc-dev CVE-2021-26934 低危 6.1.180-1 An issue was discovered in the Linux kernel 4.18 through 5.10.16, as u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-26934

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2021-02-17 02:15 修改: 2026-06-17 03:44

linux-libc-dev CVE-2021-3714 低危 6.1.180-1 kernel: Remote Page Deduplication Attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3714

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-08-23 16:15 修改: 2026-06-17 04:05

linux-libc-dev CVE-2022-0400 低危 6.1.180-1 kernel: Out of bounds read in the smc protocol stack

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0400

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-08-29 15:15 修改: 2026-06-17 04:20

linux-libc-dev CVE-2022-1247 低危 6.1.180-1 kernel: A race condition bug in rose_connect()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1247

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

linux-libc-dev CVE-2022-25265 低危 6.1.180-1 kernel: Executable Space Protection Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25265

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-02-16 21:15 修改: 2026-06-17 04:33

linux-libc-dev CVE-2022-2961 低危 6.1.180-1 kernel: race condition in rose_bind()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2961

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-08-29 15:15 修改: 2026-06-17 04:42

linux-libc-dev CVE-2022-3238 低危 6.1.180-1 kernel: ntfs3 local privledge escalation if NTFS character set and remount and umount called simultaneously

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3238

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-11-14 21:15 修改: 2026-06-17 04:59

linux-libc-dev CVE-2022-41848 低危 6.1.180-1 kernel: Race condition between mgslpc_ioctl and mgslpc_detach

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41848

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-09-30 06:15 修改: 2026-06-17 05:03

linux-libc-dev CVE-2022-44032 低危 6.1.180-1 Kernel: Race between cmm_open() and cm4000_detach() result in UAF

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44032

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-10-30 01:15 修改: 2026-06-17 05:07

linux-libc-dev CVE-2022-44033 低危 6.1.180-1 Kernel: A race condition between cm4040_open() and reader_detach() may result in UAF

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44033

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-10-30 01:15 修改: 2026-06-17 05:07

linux-libc-dev CVE-2022-44034 低危 6.1.180-1 Kernel: A use-after-free due to race between scr24x_open() and scr24x_remove()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44034

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-10-30 01:15 修改: 2026-06-17 05:07

linux-libc-dev CVE-2022-4543 低危 6.1.180-1 kernel: KASLR Prefetch Bypass Breaks KPTI

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4543

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:21

linux-libc-dev CVE-2022-45884 低危 6.1.180-1 kernel: use-after-free due to race condition occurring in dvb_register_device()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45884

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-11-25 04:15 修改: 2026-08-13 19:31

linux-libc-dev CVE-2022-45885 低危 6.1.180-1 kernel: use-after-free due to race condition occurring in dvb_frontend.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45885

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-11-25 04:15 修改: 2026-06-17 05:10

linux-libc-dev CVE-2023-23039 低危 6.1.180-1 kernel: tty: vcc: race condition leading to use-after-free in vcc_open()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23039

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-22 17:15 修改: 2026-06-17 05:36

linux-libc-dev CVE-2023-26242 低危 6.1.180-1 afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26242

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-21 01:15 修改: 2026-06-17 05:42

linux-libc-dev CVE-2023-31081 低危 6.1.180-1 An issue was discovered in drivers/media/test-drivers/vidtv/vidtv_brid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-04-24 06:15 修改: 2026-06-17 05:56

linux-libc-dev CVE-2023-31085 低危 6.1.180-1 kernel: divide-by-zero error in ctrl_cdev_ioctl when do_div happens and erasesize is 0

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31085

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-04-24 06:15 修改: 2026-06-17 05:56

linux-libc-dev CVE-2023-3640 低危 6.1.180-1 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3640

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-24 16:15 修改: 2026-07-21 19:17

linux-libc-dev CVE-2023-39191 低危 6.1.180-1 kernel: eBPF: insufficient stack type checks in dynptr

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39191

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-10-04 19:15 修改: 2026-06-17 06:11

linux-libc-dev CVE-2023-4134 低危 6.1.180-1 kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4134

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-14 11:15 修改: 2026-06-17 06:37

linux-libc-dev CVE-2023-52653 低危 6.1.180-1 kernel: SUNRPC: fix a memleak in gss_import_v2_context

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52653

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-01 13:15 修改: 2026-06-17 06:43

linux-libc-dev CVE-2023-53823 低危 6.1.180-1 kernel: block/rq_qos: protect rq_qos apis with a new lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53823

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-53857 低危 6.1.180-1 kernel: bpf: bpf_sk_storage: Fix invalid wait context lockdep report

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53857

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-06-17 06:46

linux-libc-dev CVE-2023-54030 低危 6.1.180-1 kernel: io_uring/net: don't overflow multishot recv

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54030

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 11:15 修改: 2026-06-17 06:46

linux-libc-dev CVE-2023-54088 低危 6.1.180-1 kernel: blk-cgroup: hold queue_lock when removing blkg->q_node

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54088

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 13:16 修改: 2026-08-04 10:19

linux-libc-dev CVE-2023-54227 低危 6.1.180-1 kernel: blk-mq: fix tags leak when shrink nr_hw_queues

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54227

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-30 13:16 修改: 2026-08-04 11:16

linux-libc-dev CVE-2023-54233 低危 6.1.180-1 kernel: ASoC: SOF: avoid a NULL dereference with unsupported widgets

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-54233

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-30 13:16 修改: 2026-06-17 06:47

linux-libc-dev CVE-2024-0564 低危 6.1.180-1 kernel: max page sharing of Kernel Samepage Merging (KSM) may cause memory deduplication

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0564

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-01-30 15:15 修改: 2026-06-17 06:53

linux-libc-dev CVE-2024-26661 低危 6.1.180-1 kernel: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26661

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-02 07:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26662 低危 6.1.180-1 kernel: drm/amd/display: 'panel_cntl' could be null in 'dcn21_set_backlight_level()'

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26662

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-02 07:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26672 低危 6.1.180-1 kernel: drm/amdgpu: variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26672

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-02 07:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26757 低危 6.1.180-1 kernel: md: Don't ignore read-only array in md_check_recovery()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26757

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-03 17:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26758 低危 6.1.180-1 kernel: md: Don't ignore suspended array in md_check_recovery()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26758

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-03 17:15 修改: 2026-06-17 07:18

linux-libc-dev CVE-2024-26768 低危 6.1.180-1 kernel: LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC]

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26768

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-04-03 17:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-35843 低危 6.1.180-1 kernel: iommu/vt-d: Use device rbtree in iopf reporting path

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35843

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-05-17 15:15 修改: 2026-08-04 11:17

linux-libc-dev CVE-2024-40918 低危 6.1.180-1 kernel: parisc: Try to fix random segmentation faults in package builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40918

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-12 13:15 修改: 2026-08-04 11:19

linux-libc-dev CVE-2024-42155 低危 6.1.180-1 kernel: s390/pkey: Wipe copies of protected- and secure-keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42155

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-07-30 08:15 修改: 2026-06-17 07:48

linux-libc-dev CVE-2024-50057 低危 6.1.180-1 kernel: usb: typec: tipd: Free IRQ only if it was requested before

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50057

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-10-21 20:15 修改: 2026-06-17 08:03

linux-libc-dev CVE-2024-50211 低危 6.1.180-1 kernel: udf: refactor inode_bmap() to handle error

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50211

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-11-08 06:15 修改: 2026-08-04 11:21

linux-libc-dev CVE-2025-39990 低危 6.1.180-1 kernel: bpf: Check the helper function is valid in get_helper_proto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-39990

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-15 08:15 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-40057 低危 6.1.180-1 kernel: ptp: Add a upper bound on max_vclocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40057

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-28 12:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40268 低危 6.1.180-1 kernel: cifs: client: fix memory leak in smb3_fs_context_parse_param

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40268

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-06 22:15 修改: 2026-06-17 09:21

linux-libc-dev CVE-2025-40303 低危 6.1.180-1 kernel: btrfs: ensure no dirty metadata is written back for an fs with errors

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40303

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-08 01:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68219 低危 6.1.180-1 kernel: cifs: fix memory leak in smb3_fs_context_parse_param error path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-16 14:15 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68334 低危 6.1.180-1 kernel: Linux kernel: Denial of Service due to missing power management handler for AMD Van Gogh SoC

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68334

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-22 17:16 修改: 2026-06-17 09:58

linux-libc-dev CVE-2025-68378 低危 6.1.180-1 kernel: bpf: Fix stackmap overflow check in __bpf_get_stackid()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68378

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-24 11:16 修改: 2026-06-17 09:59

linux-libc-dev CVE-2025-68794 低危 6.1.180-1 kernel: iomap: adjust read range correctly for non-block-aligned positions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68794

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2025-68822 低危 6.1.180-1 kernel: Input: alps - fix use-after-free bugs caused by dev3_register_work

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68822

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-01-13 16:16 修改: 2026-07-30 06:24

linux-libc-dev CVE-2026-31486 低危 6.1.180-1 kernel: hwmon: (pmbus/core) Protect regulator operations with mutex

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31486

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-04-22 14:16 修改: 2026-06-19 13:16

linux-libc-dev CVE-2026-43249 低危 6.1.180-1 kernel: 9p/xen: protect xen_9pfs_front_free against concurrent calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43249

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-43253 低危 6.1.180-1 kernel: iommu/amd: move wait_on_sem() out of spinlock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43253

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-06 12:16 修改: 2026-06-17 10:49

linux-libc-dev CVE-2026-53284 低危 6.1.180-1 kernel: btrfs: only release the dirty pages io tree after successful writes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53284

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-26 20:17 修改: 2026-07-08 03:56

linux-libc-dev CVE-2026-63845 低危 6.1.180-1 kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63845

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63846 低危 6.1.180-1 kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63846

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63853 低危 6.1.180-1 kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63853

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63855 低危 6.1.180-1 kernel: drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63855

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63871 低危 6.1.180-1 kernel: Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63871

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 15:16 修改: 2026-07-27 17:44

linux-libc-dev CVE-2026-63974 低危 6.1.180-1 kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63974

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-63999 低危 6.1.180-1 kernel: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63999

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:51

linux-libc-dev CVE-2026-64060 低危 6.1.180-1 kernel: netfs: Fix leak of request in netfs_write_begin() error handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64060

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64078 低危 6.1.180-1 kernel: netfilter: x_tables: add and use xtables_unregister_table_exit

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64078

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-19 16:17 修改: 2026-07-30 14:59

linux-libc-dev CVE-2026-64388 低危 6.1.180-1 kernel: smb/client: fix chown/chgrp with SMB3 POSIX Extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64388

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-64513 低危 6.1.180-1 kernel: KVM: x86: Unconditionally recompute CR8 intercept on PPR update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64513

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-25 10:17 修改: 2026-08-17 05:17

linux-libc-dev CVE-2026-68102 低危 6.1.180-1 kernel: drm/amdgpu: fix aperture mapping leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68102

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68115 低危 6.1.180-1 kernel: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68115

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68132 低危 6.1.180-1 kernel: super: fix emergency thaw deadlock on frozen block devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68132

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:19 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68164 低危 6.1.180-1 kernel: mm/damon/core: disallow overlapping input ranges for damon_set_regions()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68164

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68165 低危 6.1.180-1 kernel: mm/damon/core: validate ranges in damon_set_regions()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68165

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68175 低危 6.1.180-1 kernel: tracing: Fix resource leak on mmiotrace trace_pipe close

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68175

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68176 低危 6.1.180-1 kernel: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68216 低危 6.1.180-1 kernel: media: pwc: Return queued buffers on start_streaming() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68216

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68217 低危 6.1.180-1 kernel: media: pwc: Drain fill_buf on start_streaming() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68217

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68218 低危 6.1.180-1 kernel: media: pci: dm1105: Free allocated workqueue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68218

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68226 低危 6.1.180-1 kernel: media: cx23885: add ioremap return check and cleanup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68226

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68227 低危 6.1.180-1 kernel: media: cx231xx: fix devres lifetime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68227

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68234 低危 6.1.180-1 kernel: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68234

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68235 低危 6.1.180-1 kernel: drm/amd/display: dce100: skip non-DP stream encoders for DP MST

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68235

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68238 低危 6.1.180-1 kernel: drm/amdgpu: Release VFCT ACPI table reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68238

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68241 低危 6.1.180-1 kernel: drm/i915/mst: limit DP MST ESI service loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68241

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68249 低危 6.1.180-1 kernel: drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68249

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68250 低危 6.1.180-1 kernel: drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68250

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68251 低危 6.1.180-1 kernel: drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68251

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68252 低危 6.1.180-1 kernel: drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68252

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68254 低危 6.1.180-1 kernel: drm/i915/vrr: require valid min/max vfreq for VRR

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68254

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68288 低危 6.1.180-1 kernel: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68288

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68301 低危 6.1.180-1 kernel: net: hsr: fix memory leak on slave unregistration by removing synced VLANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68301

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68304 低危 6.1.180-1 kernel: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68304

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68313 低危 6.1.180-1 kernel: tipc: fix infinite loop in __tipc_nl_compat_dumpit

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68313

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 05:18

linux-libc-dev CVE-2026-68328 低危 6.1.180-1 kernel: nfp: Check resource mutex allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68328

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68331 低危 6.1.180-1 kernel: dpaa2-eth: put MAC endpoint device on disconnect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68331

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68333 低危 6.1.180-1 kernel: dpaa2-switch: put MAC endpoint device on disconnect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68333

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68336 低危 6.1.180-1 kernel: bonding: fix devconf_all NULL dereference when IPv6 is disabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68336

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68337 低危 6.1.180-1 kernel: Linux kernel: Denial of Service in BPF redirect helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68337

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68386 低危 6.1.180-1 kernel: bpf, sockmap: Reject unhashed UDP sockets on sockmap update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68386

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68403 低危 6.1.180-1 kernel: wifi: brcmfmac: initialize SDIO data work before cleanup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68403

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68405 低危 6.1.180-1 kernel: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68405

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68406 低危 6.1.180-1 kernel: wifi: cfg80211: validate PMSR FTM preamble range

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68406

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68407 低危 6.1.180-1 kernel: wifi: nl80211: free RNR data on MBSSID mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68407

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68408 低危 6.1.180-1 kernel: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68408

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68412 低危 6.1.180-1 kernel: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68418 低危 6.1.180-1 kernel: RDMA/irdma: Prevent user-triggered null deref on QP create

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68418

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68422 低危 6.1.180-1 kernel: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68422

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-10 13:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68430 低危 6.1.180-1 kernel: drm/amdgpu/gfx8: drop unecessary BUG_ON()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68430

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68434 低危 6.1.180-1 kernel: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68434

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68436 低危 6.1.180-1 kernel: drm/amd/display: use kvzalloc to allocate struct dc

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68436

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 00:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-68450 低危 6.1.180-1 kernel: btrfs: free mapping node on duplicate reloc root insert

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68450

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-12 01:17 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72007 低危 6.1.180-1 kernel: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72007

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72009 低危 6.1.180-1 kernel: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72009

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:20 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72023 低危 6.1.180-1 kernel: octeontx2-pf: fix SQB pointer leak on init failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72023

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:17

linux-libc-dev CVE-2026-72031 低危 6.1.180-1 kernel: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72031

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72040 低危 6.1.180-1 kernel: ipmi: fix refcount leak in i_ipmi_request()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72040

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72063 低危 6.1.180-1 kernel: gpio: tegra: do not call pinctrl for GPIO direction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72063

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72117 低危 6.1.180-1 kernel: can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72117

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72118 低危 6.1.180-1 kernel: can: bcm: fix CAN frame rx/tx statistics

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72118

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:21 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-72308 低危 6.1.180-1 kernel: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72308

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 06:22 修改: 2026-08-17 06:18

linux-libc-dev CVE-2026-74448 低危 6.1.180-1 kernel: drm/amdkfd: fix QID bit leak in pqm_create_queue()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74448

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:17 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74555 低危 6.1.180-1 kernel: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74555

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-15 13:18 修改: 2026-08-17 06:19

linux-libc-dev CVE-2026-74579 低危 6.1.180-1 kernel: netfilter: nft_payload: fix mask build for partial field offload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74579

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-17 06:19 修改: 2026-08-17 06:19

linux-libc-dev TEMP-0000000-F7A20F 低危 6.1.180-1 [Kernel: Unprivileged user can freeze journald]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-F7A20F

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

login CVE-2007-5686 低危 1:4.13+dfsg1-1+deb12u2 initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35

login CVE-2024-56433 低危 1:4.13+dfsg1-1+deb12u2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

login TEMP-0628843-DBAD28 低危 1:4.13+dfsg1-1+deb12u2 [more related to CVE-2005-4890]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

m4 CVE-2008-1687 低危 1.4.19-3 m4: unquoted output of maketemp and mkstemp

漏洞详情: https://avd.aquasec.com/nvd/cve-2008-1687

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2008-04-09 19:05 修改: 2026-04-23 00:35

m4 CVE-2008-1688 低危 1.4.19-3 m4: code execution via -F argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2008-1688

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2008-04-09 19:05 修改: 2026-04-23 00:35

gpg-wks-server CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gpg-wks-server CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-66865 低危 2.40-2 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils CVE-2025-66866 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

mount CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

mount CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

gpgconf CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gpgconf CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

ncurses-base CVE-2025-6141 低危 6.4-4 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

binutils CVE-2025-69644 低危 2.40-2 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69645 低危 2.40-2 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

ncurses-bin CVE-2025-6141 低危 6.4-4 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

gpgsm CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gpgsm CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-69646 低危 2.40-2 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69647 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

gpgv CVE-2022-3219 低危 2.2.40-1.1+deb12u2 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gpgv CVE-2026-57062 低危 2.2.40-1.1+deb12u2 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2025-69648 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils CVE-2025-69649 低危 2.40-2 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

iptables CVE-2012-2663 低危 1.8.9-2 iptables: --syn flag bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13

jq CVE-2024-23337 低危 1.6-2.1+deb12u2 jq: jq has signed integer overflow in jv.c:jvp_array_write

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23337

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-21 15:16 修改: 2026-06-17 07:12

jq CVE-2025-9403 低危 1.6-2.1+deb12u2 jq: assertion failure in run_jq_tests() of the file jq_test.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9403

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-08-25 03:15 修改: 2026-06-17 10:08

openssh-client CVE-2007-2243 低危 1:9.2p1-2+deb12u10 OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2243

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2007-04-25 16:19 修改: 2026-04-23 00:35

openssh-client CVE-2007-2768 低危 1:9.2p1-2+deb12u10 OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2768

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2007-05-21 20:30 修改: 2026-04-23 00:35

openssh-client CVE-2008-3234 低危 1:9.2p1-2+deb12u10 sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2008-3234

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2008-07-18 16:41 修改: 2026-04-23 00:35

openssh-client CVE-2016-20012 低危 1:9.2p1-2+deb12u10 openssh: Public key information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20012

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2021-09-15 20:15 修改: 2026-06-17 00:43

openssh-client CVE-2018-15919 低危 1:9.2p1-2+deb12u10 openssh: User enumeration via malformed packets in authentication requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-08-28 08:29 修改: 2026-06-17 01:43

openssh-client CVE-2019-6110 低危 1:9.2p1-2+deb12u10 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-31 18:29 修改: 2026-06-17 02:38

openssh-client CVE-2020-14145 低危 1:9.2p1-2+deb12u10 openssh: Observable discrepancy leading to an information leak in the algorithm negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-06-29 18:15 修改: 2026-06-17 02:54

openssh-client CVE-2020-15778 低危 1:9.2p1-2+deb12u10 openssh: scp allows command injection when using backtick characters in the destination argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-07-24 14:15 修改: 2026-06-17 02:57

openssh-client CVE-2026-55654 低危 1:9.2p1-2+deb12u10 openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17

openssh-client CVE-2026-73281 低危 1:9.2p1-2+deb12u10 openssh: OpenSSH: ssh-agent allows remote execution of local operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73281

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-11 20:18 修改: 2026-08-11 21:17

jq CVE-2026-40612 低危 1.6-2.1+deb12u2 jq: stack overflow via unbounded recursion in jv_contains

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40612

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:45

openssl CVE-2025-27587 低危 3.0.20-1~deb12u2 OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03

openssl CVE-2026-42767 低危 3.0.20-1~deb12u2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

passwd CVE-2007-5686 低危 1:4.13+dfsg1-1+deb12u2 initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35

passwd CVE-2024-56433 低危 1:4.13+dfsg1-1+deb12u2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

passwd TEMP-0628843-DBAD28 低危 1:4.13+dfsg1-1+deb12u2 [more related to CVE-2005-4890]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

patch CVE-2010-4651 低危 2.7.6-7 patch: directory traversal flaw allows for arbitrary file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2011-03-11 22:55 修改: 2026-04-29 01:13

patch CVE-2018-6951 低危 2.7.6-7 patch: NULL pointer dereference in pch.c:intuit_diff_type() causes a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6951

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-02-13 19:29 修改: 2026-06-17 02:02

patch CVE-2018-6952 低危 2.7.6-7 patch: Double free of memory in pch.c:another_hunk() causes a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6952

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-02-13 19:29 修改: 2026-06-17 02:02

patch CVE-2021-45261 低危 2.7.6-7 patch: Invalid Pointer via another_hunk function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45261

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2021-12-22 18:15 修改: 2026-06-17 04:13

patch CVE-2026-56288 低危 2.7.6-7 GNU patch is vulnerable to a NULL pointer dereference when processing ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56288

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-09 11:16 修改: 2026-07-13 14:08

patch CVE-2026-56289 低危 2.7.6-7 GNU patch is vulnerable to a denial of service (DoS) due to improper v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56289

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-09 11:16 修改: 2026-07-13 14:10

binutils CVE-2025-69650 低危 2.40-2 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils CVE-2025-69651 低危 2.40-2 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libapt-pkg6.0 CVE-2011-3374 低危 2.6.1 It was found that apt-key in apt, all versions, do not correctly valid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30

libasan8 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libatomic1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

binutils CVE-2025-69652 低危 2.40-2 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libbinutils CVE-2017-13716 低危 2.40-2 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libbinutils CVE-2018-20673 低危 2.40-2 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

libbinutils CVE-2018-20712 低危 2.40-2 libiberty: heap-based buffer over-read in d_expression_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20712

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2019-01-15 00:29 修改: 2026-06-17 01:53

libbinutils CVE-2018-9996 低危 2.40-2 binutils: Stack-overflow in libiberty/cplus-dem.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9996

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-04-10 22:29 修改: 2026-06-17 02:07

libbinutils CVE-2021-32256 低危 2.40-2 binutils: stack-overflow issue in demangle_type in rust-demangle.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32256

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-07-18 14:15 修改: 2026-06-17 03:52

libbinutils CVE-2023-1972 低危 2.40-2 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

libbinutils CVE-2024-53589 低危 2.40-2 binutils: objdump: buffer Overflow in the BFD library's handling of tekhex format files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53589

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2024-12-05 20:15 修改: 2026-06-17 08:09

perl CVE-2011-4116 低危 5.36.0-7+deb12u3 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04

perl CVE-2023-31486 低危 5.36.0-7+deb12u3 http-tiny: perl: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57

libbinutils CVE-2024-57360 低危 2.40-2 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

libbinutils CVE-2025-0840 低危 2.40-2 binutils: GNU Binutils objdump.c disassemble_bytes stack-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-01-29 20:15 修改: 2026-06-17 08:27

libbinutils CVE-2025-11081 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

libbinutils CVE-2025-11082 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libbinutils CVE-2025-11083 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

libbinutils CVE-2025-11412 低危 2.40-2 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libbinutils CVE-2025-11413 低危 2.40-2 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

libbinutils CVE-2025-11414 低危 2.40-2 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

libbinutils CVE-2025-1147 低危 2.40-2 binutils: GNU Binutils nm nm.c internal_strlen buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1147

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1148 低危 2.40-2 binutils: GNU Binutils ld ldelfgen.c link_order_scan memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1148

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 14:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1149 低危 2.40-2 binutils: GNU Binutils ld xmalloc.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1149

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 15:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-11494 低危 2.40-2 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

libbinutils CVE-2025-11495 低危 2.40-2 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

perl-base CVE-2011-4116 低危 5.36.0-7+deb12u3 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04

perl-base CVE-2023-31486 低危 5.36.0-7+deb12u3 http-tiny: perl: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57

libbinutils CVE-2025-1150 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1151 低危 2.40-2 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1152 低危 2.40-2 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1153 低危 2.40-2 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1176 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1176

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 06:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1178 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1178

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1179 低危 2.40-2 binutils: GNU Binutils ld libbfd.c bfd_putl64 memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1179

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 07:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1180 低危 2.40-2 binutils: GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1180

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1181 低危 2.40-2 binutils: GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1181

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 08:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-1182 低危 2.40-2 binutils: GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1182

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-02-11 09:15 修改: 2026-06-17 08:38

libbinutils CVE-2025-11839 低危 2.40-2 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

libbinutils CVE-2025-11840 低危 2.40-2 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

libbinutils CVE-2025-3198 低危 2.40-2 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

perl-modules-5.36 CVE-2011-4116 低危 5.36.0-7+deb12u3 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04

perl-modules-5.36 CVE-2023-31486 低危 5.36.0-7+deb12u3 http-tiny: perl: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57

sysvinit-utils TEMP-0517018-A83CE6 低危 3.06-4 [sysvinit: no-root option in expert installer exposes locally exploitable security flaw]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libbinutils CVE-2025-5244 低危 2.40-2 binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5244

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 13:15 修改: 2026-06-17 09:47

libbinutils CVE-2025-5245 低危 2.40-2 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

libbinutils CVE-2025-66861 低危 2.40-2 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

tar CVE-2005-2541 低危 1.34+dfsg-1.2+deb12u1 tar: does not properly warn the user when extracting setuid or setgid files

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27

tar TEMP-0290435-0B57B5 低危 1.34+dfsg-1.2+deb12u1 [tar's rmt command may have undesired side effects]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

unzip CVE-2021-4217 低危 6.0-28+deb12u1 unzip: Null pointer dereference in Unicode strings code

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4217

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

libbinutils CVE-2025-66862 低危 2.40-2 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libbinutils CVE-2025-66863 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libbinutils CVE-2025-66864 低危 2.40-2 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libbinutils CVE-2025-66865 低危 2.40-2 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

util-linux CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

util-linux CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

libbinutils CVE-2025-66866 低危 2.40-2 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

libbinutils CVE-2025-69644 低危 2.40-2 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69645 低危 2.40-2 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69646 低危 2.40-2 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

util-linux-extra CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20

util-linux-extra CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

zip CVE-2018-13410 低危 3.0-13 Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-13410

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2018-07-06 19:29 修改: 2026-06-17 01:39

libbinutils CVE-2025-69647 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libbinutils CVE-2025-69648 低危 2.40-2 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libbinutils CVE-2025-69649 低危 2.40-2 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69650 低危 2.40-2 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

rsync CVE-2026-53789 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains an improper path handling vulnerability tha ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53789

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-15 04:18

rsync CVE-2026-53790 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains multiple command and argument injection vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53790

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 16:18

rsync CVE-2026-53791 未知 3.2.7-1+deb12u6 rsync daemon before 3.5.0contains an IP address spoofing vulnerability ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53791

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 19:17

rsync CVE-2026-53792 未知 3.2.7-1+deb12u6 rsyncbefore 3.5.0contains an out-of-bounds read vulnerability in the s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53792

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-53793 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a path confinement bypass vulnerability tha ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53793

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-53794 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a logic error in --max-alloc handling that ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53794

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 16:18

rsync CVE-2026-53795 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains an arbitrary file write vulnerability that ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53795

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 21:17

rsync CVE-2026-53796 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a time-of-check to time-of-use (TOCTOU) rac ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53796

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-53797 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a symlink race condition vulnerability in t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53797

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:17

rsync CVE-2026-53798 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a privilege confusion vulnerability in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53798

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 13:19

rsync CVE-2026-53799 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a symlink race condition vulnerability that ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53799

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 19:17

rsync CVE-2026-53800 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a symlink race condition vulnerability in t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53800

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-53801 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a symlink race condition vulnerability in t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53801

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-53802 未知 3.2.7-1+deb12u6 rsync before 3.5.0 contains an arbitrary file read vulnerability that ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53802

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 17:18

rsync CVE-2026-53803 未知 3.2.7-1+deb12u6 rsync before 3.5.0 contains a symlink following vulnerability that all ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53803

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 13:19

rsync CVE-2026-70452 未知 3.2.7-1+deb12u6 rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerabili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70452

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-70453 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains an algorithmic complexity vulnerability in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70453

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:18

rsync CVE-2026-70454 未知 3.2.7-1+deb12u6 rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 ( ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70454

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 16:19

rsync CVE-2026-70455 未知 3.2.7-1+deb12u6 rsync 3.4.2 before 3.5.0contains a denial of service vulnerability tha ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70455

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 20:16

rsync CVE-2026-70456 未知 3.2.7-1+deb12u6 rsync 3.0.1 before 3.5.0contains an out-of-bounds write vulnerability ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70456

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-70457 未知 3.2.7-1+deb12u6 rsync 3.2.3before 3.5.0contains an out-of-bounds write in parse_size_a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70457

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:18

rsync CVE-2026-70458 未知 3.2.7-1+deb12u6 rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70458

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 16:19

rsync CVE-2026-70459 未知 3.2.7-1+deb12u6 rsync 3.0.0 before 3.5.0contains a null pointer dereference vulnerabil ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70459

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 20:16

rsync CVE-2026-70460 未知 3.2.7-1+deb12u6 rsync 2.3.3 before 3.5.0contains a path traversal vulnerability that a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70460

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

rsync CVE-2026-70461 未知 3.2.7-1+deb12u6 rsync 3.2.5 before 3.5.0contains a heap out-of-bounds write vulnerabil ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70461

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18

rsync CVE-2026-70462 未知 3.2.7-1+deb12u6 rsync 3.1.0 before 3.5.0contains a signed integer overflow vulnerabili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70462

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:20 修改: 2026-08-13 16:19

rsync CVE-2026-70463 未知 3.2.7-1+deb12u6 rsync 3.1.0 before 3.5.0contains an authorization bypass in auth users ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70463

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:20 修改: 2026-08-14 19:17

rsync CVE-2026-70464 未知 3.2.7-1+deb12u6 rsync daemon 2.0.0 before 3.5.0contains a denial of service vulnerabil ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-70464

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:20 修改: 2026-08-14 16:16

perl-base CVE-2026-7017 未知 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

linux-libc-dev CVE-2023-53851 未知 6.1.180-1 kernel: drm/msm/dp: Drop aux devices together with DP controller

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53851

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2025-12-09 16:17 修改: 2026-08-04 10:19

libperl5.36 CVE-2026-7017 未知 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

libmount1 CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bsdutils CVE-2026-53613 未知 1:2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsmartcols1 CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libuuid1 CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

perl CVE-2026-15534 未知 5.36.0-7+deb12u3 Perl versions through 5.45.1 have out-of-bounds heap reads and writes ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-09 18:16 修改: 2026-08-12 18:17

perl CVE-2026-19487 未知 5.36.0-7+deb12u3 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expre ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 16:17 修改: 2026-08-13 21:17

perl CVE-2026-7017 未知 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

libperl5.36 CVE-2026-15534 未知 5.36.0-7+deb12u3 Perl versions through 5.45.1 have out-of-bounds heap reads and writes ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-09 18:16 修改: 2026-08-12 18:17

util-linux CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libperl5.36 CVE-2026-19487 未知 5.36.0-7+deb12u3 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expre ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 16:17 修改: 2026-08-13 21:17

perl-base CVE-2026-15534 未知 5.36.0-7+deb12u3 Perl versions through 5.45.1 have out-of-bounds heap reads and writes ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-09 18:16 修改: 2026-08-12 18:17

perl-base CVE-2026-19487 未知 5.36.0-7+deb12u3 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expre ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 2026-08-13 16:17 修改: 2026-08-13 21:17

perl-modules-5.36 CVE-2026-15534 未知 5.36.0-7+deb12u3 Perl versions through 5.45.1 have out-of-bounds heap reads and writes ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-09 18:16 修改: 2026-08-12 18:17

perl-modules-5.36 CVE-2026-19487 未知 5.36.0-7+deb12u3 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expre ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 16:17 修改: 2026-08-13 21:17

perl-modules-5.36 CVE-2026-7017 未知 5.36.0-7+deb12u3 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

util-linux-extra CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:66462cc862fe2053b9863fefa3866e07bb5dfb06f6b3ce3177cc096e4021aabe

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

rsync CVE-2026-53783 未知 3.2.7-1+deb12u6 rsync before3.5.0 contains a time-of-check to time-of-use (TOCTOU) rac ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53783

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 17:18

zip TEMP-1143866-6DBA82 未知 3.0-13 [Command injection issue with zip]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-1143866-6DBA82

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

rsync CVE-2026-53784 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a path traversal vulnerability that allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53784

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-15 04:18

rsync CVE-2026-53785 未知 3.2.7-1+deb12u6 rsyncbefore 3.5.0contains a path traversal vulnerability that allows a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53785

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-13 16:18

rsync CVE-2026-53786 未知 3.2.7-1+deb12u6 rsyncbefore 3.5.0contains a filter rule bypass vulnerability that allo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53786

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 21:17

rsync CVE-2026-53788 未知 3.2.7-1+deb12u6 rsync before 3.5.0contains a newline injection vulnerability in the na ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53788

镜像层: sha256:f250052750a2469cb145e06e3375af739321263ae9a8ebf4906fade671aaf6be

发布日期: 2026-08-13 15:19 修改: 2026-08-14 16:16

Java (jar)
低危漏洞:5 中危漏洞:21 高危漏洞:16 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
dom4j:dom4j CVE-2020-10683 严重 1.1 dom4j: XML External Entity vulnerability in default SAX parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10683

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2020-05-01 19:15 修改: 2026-06-17 02:48

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.19.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.6 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.19.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19

commons-beanutils:commons-beanutils CVE-2019-10086 高危 1.7.0 1.9.4 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10086

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2019-08-20 21:15 修改: 2026-06-17 02:10

commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.7.0 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.6 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

dom4j:dom4j CVE-2018-1000632 高危 1.1 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000632

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2018-08-20 19:31 修改: 2026-06-17 01:32

org.apache.velocity:velocity CVE-2020-13936 高危 1.7 velocity: arbitrary code execution when attacker is able to modify templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2021-03-10 08:15 修改: 2026-06-17 02:53

org.assertj:assertj-core CVE-2026-24400 高危 3.27.3 3.27.7 assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24400

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 23:16 修改: 2026-06-17 10:23

org.codehaus.plexus:plexus-utils CVE-2025-67030 高危 3.5.1 4.0.3, 3.6.1 org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67030

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-25 18:16 修改: 2026-07-21 12:17

org.codehaus.plexus:plexus-utils CVE-2025-67030 高危 4.0.1 4.0.3, 3.6.1 org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67030

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-25 18:16 修改: 2026-07-21 12:17

org.springframework.boot:spring-boot CVE-2026-40973 高危 3.5.4 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10

org.springframework:spring-core CVE-2025-41249 高危 6.2.9 6.2.11 org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22

org.springframework:spring-expression CVE-2026-41850 高危 6.2.9 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.6 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

commons-lang:commons-lang CVE-2025-48924 中危 2.4 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.6 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18

com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.6 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19

net.i2p.crypto:eddsa CVE-2020-36843 中危 0.3.0 The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36843

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-13 06:15 修改: 2026-06-17 03:16

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.14.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.8.1 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.24.3 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03

com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.6 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40

org.apache.velocity:velocity-tools CVE-2020-13959 中危 2.0 velocity: XSS in the default error page for VelocityView

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13959

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2021-03-10 08:15 修改: 2026-06-17 02:54

ch.qos.logback:logback-core CVE-2025-11226 中危 1.5.18 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.19.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

org.eclipse.jgit:org.eclipse.jgit CVE-2025-4949 中危 5.13.3.202401111512-r 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r org.eclipse.jgit: XXE vulnerability in Eclipse JGit

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4949

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-21 07:16 修改: 2026-06-17 09:34

org.iq80.snappy:snappy CVE-2024-36124 中危 0.4 0.5 snappy: tries to read outside the bounds of the given byte arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36124

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2024-06-03 15:15 修改: 2026-06-17 07:36

org.jsoup:jsoup CVE-2026-71497 中危 1.15.3 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.19.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.19.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

org.springframework:spring-expression CVE-2026-41851 中危 6.2.9 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

ch.qos.logback:logback-core CVE-2026-1225 低危 1.5.18 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

org.springframework:spring-core CVE-2026-41848 低危 6.2.9 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

ch.qos.logback:logback-core CVE-2026-9828 低危 1.5.18 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

ch.qos.logback:logback-core CVE-2026-10532 低危 1.5.18 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

org.springframework:spring-expression CVE-2026-41852 低危 6.2.9 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

Node.js (node-pkg)
低危漏洞:8 中危漏洞:39 高危漏洞:54 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
decompress CVE-2026-53486 严重 4.2.1 decompress: @xhmikosr/decompress: Decompress: Arbitrary file read/write via crafted archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53486

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:29

tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57

tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57

tar CVE-2026-59873 严重 7.5.11 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57

tar CVE-2026-59873 严重 7.5.16 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57

brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17

brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48

brace-expansion CVE-2026-69152 高危 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

brace-expansion CVE-2026-13149 高危 5.0.6 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17

brace-expansion CVE-2026-14257 高危 5.0.6 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48

brace-expansion CVE-2026-69152 高危 5.0.6 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

brace-expansion CVE-2026-69152 高危 5.0.8 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

braces CVE-2024-4068 高危 2.3.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17

cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17

brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17

git-clone CVE-2022-25900 高危 0.1.0 Command injection in git-clone

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25900

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2022-07-01 20:15 修改: 2026-06-17 04:34

glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55

glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55

http-cache-semantics CVE-2022-25881 高危 3.8.1 4.1.1 http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25881

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-01-31 05:15 修改: 2026-06-17 04:34

ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16

ip-address CVE-2026-69192 高危 10.2.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16

ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16

ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16

js-yaml GHSA-5p4m-2wfm-xmqj 高危 4.3.0 4.3.1, 3.15.1 JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27

minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26

minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26

minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27

minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27

minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27

minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27

parse-git-config CVE-2025-25975 高危 3.0.0 parse-git-config: Prototype Pollution Vulneralbility in parse-git-config

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25975

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-03-12 19:15 修改: 2026-06-17 09:01

picomatch CVE-2026-33671 高危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37

sigstore CVE-2026-48815 高危 2.3.1 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

sigstore CVE-2026-48815 高危 2.3.1 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

sigstore CVE-2026-48815 高危 3.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17

brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48

tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-16 22:16 修改: 2026-08-17 12:17

tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-16 22:16 修改: 2026-08-17 12:17

tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18

tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18

tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 01:16 修改: 2026-08-17 12:17

tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 01:16 修改: 2026-08-17 12:17

tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26

tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26

tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19

tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19

tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34

tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34

tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54

tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54

brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48

tar CVE-2026-59874 高危 7.5.11 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54

brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

tar CVE-2026-59874 高危 7.5.16 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54

tmp CVE-2026-44705 高危 0.0.33 0.2.6 tmp: path Traversal via unsanitized prefix/postfix enables directory escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44705

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:51

undici CVE-2026-12151 高危 6.26.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-17 17:16 修改: 2026-08-17 12:17

brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38

brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38

@sigstore/core CVE-2026-48758 中危 2.0.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

got CVE-2022-33987 中危 8.3.2 12.1.0, 11.8.5 nodejs-got: missing verification of requested URLs allows redirects to UNIX sockets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-33987

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2022-06-18 21:15 修改: 2026-06-17 04:49

apollo-server-core GHSA-9q82-xgwf-vj6h 中危 3.13.0 Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention

漏洞详情: https://github.com/advisories/GHSA-9q82-xgwf-vj6h

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-26 21:53 修改: 2026-03-26 21:53

@sigstore/core CVE-2026-48758 中危 1.1.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-12 20:16 修改: 2026-08-17 12:18

brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38

picomatch CVE-2026-33672 中危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37

ip-address CVE-2026-54272 中危 10.2.0 10.2.1 ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16

ip-address CVE-2026-69198 中危 10.2.0 10.2.2 ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-03 20:17 修改: 2026-08-04 18:16

tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03

tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03

tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02

tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02

tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10

tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10

tar GHSA-r292-9mhp-454m 中危 6.2.1 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26

tar GHSA-r292-9mhp-454m 中危 6.2.1 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26

@sigstore/core CVE-2026-48758 中危 1.1.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

decompress CVE-2026-10732 中危 4.2.1 decompress: Decompress: Arbitrary file write leading to remote code execution via crafted ZIP archive (Zip Slip)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10732

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-05 07:16 修改: 2026-07-23 12:17

tar CVE-2026-53655 中危 7.5.11 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03

tar CVE-2026-59871 中危 7.5.11 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02

tar CVE-2026-59875 中危 7.5.11 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10

tar GHSA-r292-9mhp-454m 中危 7.5.11 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26

ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-12 20:16 修改: 2026-08-17 12:18

ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-12 20:16 修改: 2026-08-17 12:18

tar CVE-2026-59871 中危 7.5.16 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02

tar CVE-2026-59875 中危 7.5.16 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10

tar GHSA-r292-9mhp-454m 中危 7.5.16 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26

tar GHSA-r292-9mhp-454m 中危 7.5.20 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26

decompress CVE-2026-39243 中危 4.2.1 decompress: Decompress: File disclosure and corruption via arbitrary hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39243

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-09 22:17 修改: 2026-07-13 12:57

micromatch CVE-2024-4067 中危 3.1.10 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

undici CVE-2026-15157 中危 6.26.0 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41

undici CVE-2026-16728 中危 6.26.0 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06

undici CVE-2026-16729 中危 6.26.0 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18

undici CVE-2026-9679 中危 6.26.0 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43

uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47

uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47

diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18

brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48

tmp CVE-2025-54798 低危 0.0.33 0.2.4 tmp: tmp Symbolic Link Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54798

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-07 01:15 修改: 2026-06-17 09:40

undici CVE-2026-11525 低危 6.26.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46

undici CVE-2026-6733 低危 6.26.0 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46

brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48

diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18

vue CVE-2024-9506 低危 2.7.16 3.0.0-alpha.0 vue: Regular Expression Denial of Service (ReDoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9506

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2024-10-15 16:15 修改: 2026-06-17 08:24

Python (python-pkg)
低危漏洞:0 中危漏洞:3 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
msgpack GHSA-6v7p-g79w-8964 高危 1.1.2 1.2.1 MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

漏洞详情: https://github.com/advisories/GHSA-6v7p-g79w-8964

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-19 21:42 修改: 2026-06-19 21:42

setuptools CVE-2025-47273 高危 70.3.0 78.1.1 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27

setuptools CVE-2026-59890 中危 82.0.1 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

setuptools CVE-2026-59890 中危 82.0.1 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

setuptools CVE-2026-59890 中危 70.3.0 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

Ruby (gemspec)
低危漏洞:3 中危漏洞:8 高危漏洞:5 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
net-imap CVE-2026-42257 严重 0.3.9 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42257

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-09 20:16 修改: 2026-07-24 21:10

erb CVE-2026-41316 高危 4.0.2 ~> 4.0.3.1, ~> 4.0.4.1, ~> 6.0.1.1, >= 6.0.4 erb: ERB: Arbitrary code execution via deserialization bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41316

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-24 03:16 修改: 2026-08-05 13:22

bundler CVE-2020-36327 高危 2.1.4 = 2.2.10, >= 2.2.18 rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36327

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2021-04-29 03:15 修改: 2026-06-17 03:15

net-imap CVE-2026-42245 高危 0.3.9 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42245

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-09 20:16 修改: 2026-07-24 19:10

net-imap CVE-2026-42246 高危 0.3.9 ~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42246

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-09 20:16 修改: 2026-08-05 13:22

net-imap CVE-2026-42258 高危 0.3.9 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42258

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-09 20:16 修改: 2026-08-05 13:22

bundler CVE-2021-43809 中危 2.1.4 >= 2.2.33 rubygem-bundler: unexpected code execution in Gemfiles

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43809

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2021-12-08 19:15 修改: 2026-06-17 04:11

msgpack CVE-2026-54522 中危 1.8.0 >= 1.8.2 MessagePack for Ruby is an implementation of the MessagePack binary se ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54522

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-30 17:16 修改: 2026-08-05 19:41

msgpack CVE-2026-54522 中危 1.8.0 >= 1.8.2 MessagePack for Ruby is an implementation of the MessagePack binary se ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54522

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-30 17:16 修改: 2026-08-05 19:41

msgpack CVE-2026-54522 中危 1.8.0 >= 1.8.2 MessagePack for Ruby is an implementation of the MessagePack binary se ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54522

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-30 17:16 修改: 2026-08-05 19:41

net-imap CVE-2026-47240 中危 0.3.9 ~> 0.5.15, >= 0.6.4.1 net-imap: Net::IMAP: Command injection via non-synchronizing literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47240

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 21:16 修改: 2026-06-23 16:16

net-imap CVE-2026-47242 中危 0.3.9 ~> 0.5.15, >= 0.6.4.1 Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47242

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:03

net-imap CVE-2026-47240 中危 0.4.25 ~> 0.5.15, >= 0.6.4.1 net-imap: Net::IMAP: Command injection via non-synchronizing literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47240

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 21:16 修改: 2026-06-23 16:16

net-imap CVE-2026-47242 中危 0.4.25 ~> 0.5.15, >= 0.6.4.1 Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47242

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:03

json CVE-2026-54696 低危 2.9.1 >= 2.19.9 json: Ruby JSON: Denial of service via heap buffer overflow with oversized streamed objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54696

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-30 23:17 修改: 2026-07-02 17:54

net-imap CVE-2026-47241 低危 0.3.9 ~> 0.5.15, >= 0.6.4.1 net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47241

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:16

net-imap CVE-2026-47241 低危 0.4.25 ~> 0.5.15, >= 0.6.4.1 net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47241

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:16

opt/docker/27.5.1/bin/docker (gobinary)
低危漏洞:2 中危漏洞:29 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.11 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.11 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.11 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.11 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.11 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.11 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.11 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.11 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.11 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.11 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.11 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.11 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.11 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.11 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.11 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.11 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.11 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.11 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.11 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.11 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.11 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.11 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.11 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22866 中危 v1.22.11 1.22.12, 1.23.6, 1.24.0-rc.3 crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-02-06 17:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22870 中危 v1.22.11 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.11 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.11 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.11 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.11 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.11 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.11 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.11 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.11 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.11 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.11 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.11 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.11 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.11 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.11 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.11 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.11 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.11 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.11 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.11 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.11 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.11 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.11 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.11 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.11 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.11 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.11 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.11 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.11 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/docker/28.5.2/bin/docker (gobinary)
低危漏洞:1 中危漏洞:12 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.25.3 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.25.3 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.25.3 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.25.3 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.25.3 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.25.3 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.25.3 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.25.3 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.25.3 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.25.3 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.25.3 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.25.3 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.25.3 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.25.3 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.25.3 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.25.3 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.25.3 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.25.3 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.25.3 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.25.3 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.25.3 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.25.3 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-61727 中危 v1.25.3 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.25.3 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.25.3 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.25.3 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.25.3 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.25.3 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.25.3 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.25.3 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.25.3 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.25.3 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.25.3 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.25.3 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.25.3 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/docker/29.7.2/bin/docker (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:65e014e36649f71b11c64c571481ad7f3b1ceb2e81ef4e57b4a4ed1f9a6af82f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

opt/dotnet/10/sdk/10.0.400/Containers/tasks/net10.0/Microsoft.NET.Build.Containers.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/DotnetTools/dotnet-dev-certs/10.0.11-servicing.26373.116/tools/net10.0/any/dotnet-dev-certs.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/DotnetTools/dotnet-format/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/DotnetTools/dotnet-format/dotnet-format.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/DotnetTools/dotnet-user-jwts/10.0.11-servicing.26373.116/tools/net10.0/any/dotnet-user-jwts.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/DotnetTools/dotnet-user-secrets/10.0.11-servicing.26373.116/tools/net10.0/any/dotnet-user-secrets.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/DotnetTools/dotnet-watch/10.0.400/tools/net10.0/any/dotnet-watch.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/FSharp/fsc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/FSharp/fsi.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/MSBuild.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/NuGet.CommandLine.XPlat.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Roslyn/Microsoft.Build.Tasks.CodeAnalysis.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Roslyn/bincore/VBCSCompiler.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Roslyn/bincore/csc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Roslyn/bincore/vbc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.Build.Tasks.Git/tools/net/Microsoft.Build.Tasks.Git.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.NET.Sdk.BlazorWebAssembly/tools/net10.0/Microsoft.NET.Sdk.BlazorWebAssembly.Tool.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.NET.Sdk.Razor/source-generators/Microsoft.CodeAnalysis.Razor.Compiler.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.NET.Sdk.Razor/tools/rzc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.NET.Sdk.StaticWebAssets/tools/net10.0/Microsoft.NET.Sdk.StaticWebAssets.Tool.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.SourceLink.AzureRepos.Git/tools/net/Microsoft.SourceLink.AzureRepos.Git.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.SourceLink.Bitbucket.Git/tools/net/Microsoft.SourceLink.Bitbucket.Git.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.SourceLink.Common/tools/net/Microsoft.SourceLink.Common.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.SourceLink.GitHub/tools/net/Microsoft.SourceLink.GitHub.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/Sdks/Microsoft.SourceLink.GitLab/tools/net/Microsoft.SourceLink.GitLab.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/datacollector.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/dotnet.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/redist.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/testhost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/sdk/10.0.400/vstest.console.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/shared/Microsoft.AspNetCore.App/10.0.11/Microsoft.AspNetCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/10/shared/Microsoft.NETCore.App/10.0.11/Microsoft.NETCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/DotnetTools/dotnet-dev-certs/6.0.36-servicing.24516.4/tools/net6.0/any/dotnet-dev-certs.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/DotnetTools/dotnet-format/dotnet-format.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/DotnetTools/dotnet-user-secrets/6.0.36-servicing.24516.4/tools/net6.0/any/dotnet-user-secrets.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/DotnetTools/dotnet-watch/6.0.428-servicing.24517.40/tools/net6.0/any/dotnet-watch.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/FSharp/fsc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.3.4 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

opt/dotnet/6/sdk/6.0.428/FSharp/fsi.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.3.4 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

opt/dotnet/6/sdk/6.0.428/MSBuild.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging CVE-2024-0057 严重 6.3.4-rc.2 5.11.6, 6.0.6, 6.3.4, 6.4.3, 6.6.2, 6.7.1, 6.8.1 dotnet: X509 Certificates - Validation Bypass across Azure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0057

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2024-01-09 18:15 修改: 2026-06-17 06:52

Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.3.4 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

opt/dotnet/6/sdk/6.0.428/Microsoft.TestPlatform.PlatformAbstractions.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Microsoft.VisualStudio.TestPlatform.ObjectModel.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/NuGet.CommandLine.XPlat.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging CVE-2024-0057 严重 6.3.4-rc.2 5.11.6, 6.0.6, 6.3.4, 6.4.3, 6.6.2, 6.7.1, 6.8.1 dotnet: X509 Certificates - Validation Bypass across Azure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0057

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2024-01-09 18:15 修改: 2026-06-17 06:52

Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.3.4 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

opt/dotnet/6/sdk/6.0.428/Roslyn/Microsoft.Build.Tasks.CodeAnalysis.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Roslyn/bincore/VBCSCompiler.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Roslyn/bincore/csc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Roslyn/bincore/vbc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Sdks/Microsoft.NET.ILLink.Tasks/tools/net6.0/ILLink.Tasks.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Sdks/Microsoft.NET.ILLink.Tasks/tools/net6.0/illink.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Sdks/Microsoft.NET.Sdk.BlazorWebAssembly/tools/net6.0/Microsoft.NET.Sdk.BlazorWebAssembly.Tool.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/Sdks/Microsoft.NET.Sdk.Razor/tools/rzc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/datacollector.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/dotnet-watch.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/dotnet.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging CVE-2024-0057 严重 6.3.4-rc.2 5.11.6, 6.0.6, 6.3.4, 6.4.3, 6.6.2, 6.7.1, 6.8.1 dotnet: X509 Certificates - Validation Bypass across Azure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0057

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2024-01-09 18:15 修改: 2026-06-17 06:52

Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.3.4 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

opt/dotnet/6/sdk/6.0.428/package.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/testhost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/sdk/6.0.428/vstest.console.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/6/shared/Microsoft.AspNetCore.App/6.0.36/Microsoft.AspNetCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.AspNetCore.App.Runtime.linux-x64 CVE-2025-24070 高危 6.0.36 9.0.3, 8.0.14 dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24070

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-11 17:16 修改: 2026-06-17 08:58

opt/dotnet/6/shared/Microsoft.NETCore.App/6.0.36/Microsoft.NETCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Containers/containerize/containerize.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/8/sdk/8.0.424/Containers/tasks/net8.0/Microsoft.NET.Build.Containers.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/8/sdk/8.0.424/DotnetTools/dotnet-dev-certs/8.0.30-servicing.26373.4/tools/net8.0/any/dotnet-dev-certs.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/DotnetTools/dotnet-format/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/DotnetTools/dotnet-format/dotnet-format.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:6 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.11.48 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

System.Security.Cryptography.Xml CVE-2026-47302 高危 8.0.3 10.0.10, 9.0.18, 8.0.4 dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47302

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 19:17 修改: 2026-07-24 13:40

System.Security.Cryptography.Xml CVE-2026-47304 高危 8.0.3 10.0.10, 9.0.18, 8.0.4 dotnet: .NET Security Feature Bypass Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47304

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 19:17 修改: 2026-07-24 13:39

System.Security.Cryptography.Xml CVE-2026-50525 高危 8.0.3 10.0.10, 9.0.18, 8.0.4 dotnet: .NET: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50525

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 20:17 修改: 2026-07-24 13:39

System.Security.Cryptography.Xml CVE-2026-50527 高危 8.0.3 10.0.10, 9.0.18, 8.0.4 dotnet: .NET Framework: Denial of Service via network-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50527

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 20:17 修改: 2026-07-24 13:39

System.Security.Cryptography.Xml CVE-2026-50648 高危 8.0.3 10.0.10, 9.0.18, 8.0.4 dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50648

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-14 20:17 修改: 2026-07-24 13:39

opt/dotnet/8/sdk/8.0.424/DotnetTools/dotnet-user-jwts/8.0.30-servicing.26373.4/tools/net8.0/any/dotnet-user-jwts.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/DotnetTools/dotnet-user-secrets/8.0.30-servicing.26373.4/tools/net8.0/any/dotnet-user-secrets.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/DotnetTools/dotnet-watch/8.0.424-servicing.26373.23/tools/net8.0/any/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/DotnetTools/dotnet-watch/8.0.424-servicing.26373.23/tools/net8.0/any/dotnet-watch.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/FSharp/fsc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.11.48 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

opt/dotnet/8/sdk/8.0.424/FSharp/fsi.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.11.48 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

opt/dotnet/8/sdk/8.0.424/MSBuild.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.11.48 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/8/sdk/8.0.424/NuGet.CommandLine.XPlat.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.11.48 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/8/sdk/8.0.424/Roslyn/Microsoft.Build.Tasks.CodeAnalysis.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Roslyn/bincore/VBCSCompiler.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Roslyn/bincore/csc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Roslyn/bincore/vbc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Sdks/Microsoft.NET.Sdk.BlazorWebAssembly/tools/net8.0/Microsoft.NET.Sdk.BlazorWebAssembly.Tool.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Sdks/Microsoft.NET.Sdk.Razor/source-generators/Microsoft.CodeAnalysis.Razor.Compiler.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Sdks/Microsoft.NET.Sdk.Razor/tools/rzc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/Sdks/Microsoft.NET.Sdk.StaticWebAssets/tools/net8.0/Microsoft.NET.Sdk.StaticWebAssets.Tool.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/datacollector.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/dotnet.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Microsoft.Build.Tasks.Core CVE-2025-26646 高危 17.11.48 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8 dotnet: .NET and Visual Studio Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26646

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-05-13 22:15 修改: 2026-06-17 09:02

NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.11.2-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/8/sdk/8.0.424/testhost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/sdk/8.0.424/vstest.console.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/shared/Microsoft.AspNetCore.App/8.0.30/Microsoft.AspNetCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/8/shared/Microsoft.NETCore.App/8.0.30/Microsoft.NETCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Containers/tasks/net9.0/Microsoft.NET.Build.Containers.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-dev-certs/9.0.19-servicing.26370.16/tools/net9.0/any/dotnet-dev-certs.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-format/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-format/dotnet-format.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-user-jwts/9.0.19-servicing.26370.16/tools/net9.0/any/dotnet-user-jwts.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-user-secrets/9.0.19-servicing.26370.16/tools/net9.0/any/dotnet-user-secrets.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-watch/9.0.317-servicing.26371.13/tools/net9.0/any/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-watch/9.0.317-servicing.26371.13/tools/net9.0/any/dotnet-watch.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/9/sdk/9.0.317/DotnetTools/dotnet-watch/9.0.317-servicing.26371.13/tools/net9.0/any/dotnet.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/9/sdk/9.0.317/FSharp/fsc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/FSharp/fsi.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/MSBuild.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/9/sdk/9.0.317/NuGet.CommandLine.XPlat.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/9/sdk/9.0.317/Roslyn/Microsoft.Build.Tasks.CodeAnalysis.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Roslyn/bincore/VBCSCompiler.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Roslyn/bincore/csc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Roslyn/bincore/vbc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Sdks/Microsoft.NET.Sdk.BlazorWebAssembly/tools/net9.0/Microsoft.NET.Sdk.BlazorWebAssembly.Tool.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Sdks/Microsoft.NET.Sdk.Razor/source-generators/Microsoft.CodeAnalysis.Razor.Compiler.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Sdks/Microsoft.NET.Sdk.Razor/tools/rzc.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/Sdks/Microsoft.NET.Sdk.StaticWebAssets/tools/net9.0/Microsoft.NET.Sdk.StaticWebAssets.Tool.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/datacollector.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/dotnet.deps.json (dotnet-core)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
NuGet.Packaging GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

NuGet.Protocol GHSA-g4vj-cjjj-v7hg 低危 6.14.3-rc.1 4.9.7, 5.11.7, 6.8.2, 6.11.2, 6.12.5, 6.14.3, 7.0.3, 7.3.1 Defense in Depth update for NuGet Client

漏洞详情: https://github.com/advisories/GHSA-g4vj-cjjj-v7hg

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-14 23:42 修改: 2026-04-14 23:42

opt/dotnet/9/sdk/9.0.317/testhost.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/sdk/9.0.317/vstest.console.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/shared/Microsoft.AspNetCore.App/9.0.19/Microsoft.AspNetCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/dotnet/9/shared/Microsoft.NETCore.App/9.0.19/Microsoft.NETCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/cosign/2.6.5/cosign (gobinary)
低危漏洞:1 中危漏洞:21 高危漏洞:32 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
google.golang.org/grpc CVE-2026-33186 严重 v1.77.0 1.79.3 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-20 23:16 修改: 2026-08-17 12:17

github.com/go-jose/go-jose/v4 CVE-2026-34986 高危 v4.1.3 4.1.4 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34986

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-06 17:17 修改: 2026-08-17 12:18

github.com/sigstore/fulcio CVE-2026-49478 高危 v1.8.4 1.8.6 github.com/sigstore/fulcio: Fulcio: Server-Side Request Forgery and Kubernetes ServiceAccount token leakage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49478

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 13:19 修改: 2026-08-15 04:18

github.com/sigstore/rekor CVE-2026-48702 高危 v1.4.3 1.5.2 github.com/sigstore/rekor: Rekor: Denial of Service due to unbounded gzip decompression in Alpine APK parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48702

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 14:17 修改: 2026-08-13 16:18

go.opentelemetry.io/otel CVE-2026-29181 高危 v1.38.0 1.41.0 github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29181

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-07 21:17 修改: 2026-08-17 12:17

go.opentelemetry.io/otel/sdk CVE-2026-24051 高危 v1.38.0 1.40.0 opentelemetry-go: OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24051

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-02 23:16 修改: 2026-06-17 10:22

go.opentelemetry.io/otel/sdk CVE-2026-39883 高危 v1.38.0 1.43.0 github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 21:17 修改: 2026-08-14 13:18

golang.org/x/crypto CVE-2026-39828 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-17 12:18

golang.org/x/crypto CVE-2026-39829 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-17 12:18

golang.org/x/crypto CVE-2026-39830 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-17 12:18

golang.org/x/crypto CVE-2026-39831 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10

golang.org/x/crypto CVE-2026-39832 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-17 12:18

golang.org/x/crypto CVE-2026-39835 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-17 12:18

golang.org/x/crypto CVE-2026-42508 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-17 12:18

golang.org/x/crypto CVE-2026-46595 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-17 12:18

golang.org/x/crypto CVE-2026-46597 高危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-25681 高危 v0.48.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-27136 高危 v0.48.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-33814 高危 v0.48.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

golang.org/x/net CVE-2026-39821 高危 v0.48.0 0.55.0 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

golang.org/x/net CVE-2026-46600 高危 v0.48.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

golang.org/x/text CVE-2026-56852 高危 v0.32.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27

github.com/docker/cli CVE-2025-15558 高危 v29.0.3+incompatible 29.2.0 docker/cli: Docker CLI for Windows: Privilege escalation via malicious plugin binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15558

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-04 17:16 修改: 2026-07-15 02:17

google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.77.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03

stdlib CVE-2026-33818 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-46600 高危 v1.26.4 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

go.mongodb.org/mongo-driver CVE-2026-2303 中危 v1.17.6 1.17.7 CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2303

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-10 20:17 修改: 2026-06-17 10:30

github.com/go-chi/chi/v5 CVE-2025-69725 中危 v5.2.3 5.2.4 go-chi/chi: Go-chi/chi: Open Redirect vulnerability allows redirection to malicious websites

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-19 17:24 修改: 2026-07-05 02:17

github.com/sigstore/fulcio CVE-2026-22772 中危 v1.8.4 1.8.5 fulcio: Fulcio: Server-Side Request Forgery (SSRF) via unanchored regex in MetaIssuer URL validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22772

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-12 21:15 修改: 2026-06-17 10:20

github.com/in-toto/in-toto-golang GHSA-pmwq-pjrm-6p5r 中危 v0.9.0 0.11.0 in-toto-golang and in-toto-python have inconsistent negation behavior

漏洞详情: https://github.com/advisories/GHSA-pmwq-pjrm-6p5r

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-08 22:24 修改: 2026-05-08 22:24

github.com/sigstore/rekor CVE-2026-23831 中危 v1.4.3 1.5.0 github.com/sigstore/rekor: Rekor denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23831

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-22 22:16 修改: 2026-06-17 10:22

golang.org/x/net CVE-2026-25680 中危 v0.48.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-42502 中危 v0.48.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-42506 中危 v0.48.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

github.com/sigstore/rekor CVE-2026-24117 中危 v1.4.3 1.5.0 github.com/sigstore/rekor: Rekor Server-Side Request Forgery (SSRF)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24117

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-22 22:16 修改: 2026-06-17 10:22

github.com/sigstore/sigstore CVE-2026-24137 中危 v1.10.3 1.10.4 github.com/sigstore/sigstore: sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24137

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-23 00:15 修改: 2026-06-17 10:22

github.com/sigstore/sigstore-go CVE-2026-49834 中危 v1.1.4 1.2.0 github.com/sigstore/sigstore-go: sigstore-go: Security Policy Bypass via Compromised Log

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49834

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-17 20:17 修改: 2026-07-30 13:18

github.com/sigstore/timestamp-authority/v2 CVE-2026-39984 中危 v2.0.3 2.0.6 timestamp-authority/v2/pkg/verification: improper certificate validation in verifier

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39984

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-15 04:17 修改: 2026-06-17 10:42

github.com/sigstore/timestamp-authority/v2 CVE-2026-49835 中危 v2.0.3 2.1.0 timestamp-authority: Sigstore Timestamp Authority: Denial of Service via unbounded metric label cardinality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49835

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-17 19:17 修改: 2026-07-30 14:14

github.com/theupdateframework/go-tuf/v2 CVE-2026-23991 中危 v2.3.0 2.3.1 github.com/theupdateframework/go-tuf/v2: go-tuf client DoS via malformed server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23991

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-22 03:15 修改: 2026-06-17 10:22

github.com/theupdateframework/go-tuf/v2 CVE-2026-23992 中危 v2.3.0 2.3.1 github.com/theupdateframework/go-tuf/v2: go-tuf improperly validates the configured threshold for delegations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23992

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-22 03:15 修改: 2026-06-17 10:22

github.com/theupdateframework/go-tuf/v2 CVE-2026-24686 中危 v2.3.0 2.4.1 github.com/theupdateframework/go-tuf/v2: go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24686

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-27 01:16 修改: 2026-06-17 10:23

golang.org/x/crypto CVE-2026-39827 中危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10

golang.org/x/crypto CVE-2026-39833 中危 v0.46.0 0.52.0 golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-08-11 22:17

golang.org/x/crypto CVE-2026-39834 中危 v0.46.0 0.52.0 golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10

golang.org/x/crypto CVE-2026-46598 中危 v0.46.0 0.52.0 golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10

stdlib CVE-2026-42505 中危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

github.com/sigstore/sigstore-go CVE-2026-54787 低危 v1.1.4 1.2.1 github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54787

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-31 23:17 修改: 2026-08-01 00:17

golang.org/x/crypto GO-2026-5932 未知 v0.46.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

golang.org/x/mod CVE-2026-56864 未知 v0.30.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

golang.org/x/sys CVE-2026-39824 未知 v0.39.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

golang.org/x/mod CVE-2026-56865 未知 v0.30.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

opt/mise/installs/go/1.22.12/bin/go (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/bin/gofmt (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/addr2line (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/asm (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/buildid (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/cgo (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/compile (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/covdata (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/cover (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/doc (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/fix (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/link (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/nm (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/objdump (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/pack (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/pprof (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/test2json (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/trace (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.22.12/pkg/tool/linux_amd64/vet (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.22.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.22.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.22.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.22.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.22.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.22.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.22.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.22.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.22.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.22.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.22.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.22.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.22.12 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.22.12 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.22.12 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.22.12 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.22.12 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.22.12 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.22.12 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.22.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.22.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.22.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.22.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.22.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.22.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.22.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.22.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.22.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.22.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.22.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.22.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.22.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.22.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.22.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.22.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.22.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.22.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.22.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.22.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.22.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.22.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/bin/go (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/bin/gofmt (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/addr2line (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/asm (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/buildid (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/cgo (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/compile (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/covdata (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/cover (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/doc (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/fix (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/link (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/nm (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/objdump (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/pack (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/pprof (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/preprofile (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/test2json (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/trace (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.23.12/pkg/tool/linux_amd64/vet (gobinary)
低危漏洞:2 中危漏洞:21 高危漏洞:21 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.23.12 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

stdlib CVE-2025-61726 高危 v1.23.12 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.23.12 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.23.12 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.23.12 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.23.12 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.23.12 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.23.12 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.23.12 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.23.12 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.23.12 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.23.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-47912 中危 v1.23.12 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.23.12 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.23.12 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.23.12 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.23.12 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.23.12 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.23.12 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.23.12 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.23.12 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.23.12 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.23.12 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.23.12 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.23.12 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.23.12 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.23.12 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.23.12 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.23.12 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.23.12 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.23.12 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.23.12 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.23.12 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.23.12 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/bin/go (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/bin/gofmt (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/addr2line (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/asm (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/buildid (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/cgo (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/compile (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/covdata (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/cover (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/doc (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/fix (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/link (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/nm (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/objdump (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/pack (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/pprof (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/preprofile (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/test2json (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/trace (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.24.13/pkg/tool/linux_amd64/vet (gobinary)
低危漏洞:1 中危漏洞:9 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-25679 高危 v1.24.13 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.13 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.13 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.13 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.13 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.13 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.13 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.13 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.13 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-27142 中危 v1.24.13 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.13 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.13 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.13 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.13 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.13 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.13 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.13 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-27139 低危 v1.24.13 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/go/1.25.13/bin/go (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/bin/gofmt (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/pkg/tool/linux_amd64/asm (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/pkg/tool/linux_amd64/cgo (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/pkg/tool/linux_amd64/compile (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/pkg/tool/linux_amd64/cover (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/pkg/tool/linux_amd64/link (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/pkg/tool/linux_amd64/preprofile (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/go/1.25.13/pkg/tool/linux_amd64/vet (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/helm/3.21.4/linux-amd64/helm (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:9 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
oras.land/oras-go/v2 CVE-2026-50163 高危 v2.6.1 2.6.2 oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02

stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

golang.org/x/crypto GO-2026-5932 未知 v0.54.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

opt/mise/installs/kubectl/1.34.10/kubectl (gobinary)
低危漏洞:0 中危漏洞:5 高危漏洞:13 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-25681 高危 v0.38.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-27136 高危 v0.38.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-33814 高危 v0.38.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

golang.org/x/net CVE-2026-39821 高危 v0.38.0 0.55.0 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

golang.org/x/net CVE-2026-46600 高危 v0.38.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

golang.org/x/text CVE-2026-56852 高危 v0.23.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27

stdlib CVE-2026-33818 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-56853 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

golang.org/x/net CVE-2026-42502 中危 v0.38.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2026-42506 中危 v0.38.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/net CVE-2025-47911 中危 v0.38.0 0.45.0 golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28

golang.org/x/net CVE-2025-58190 中危 v0.38.0 0.45.0 golang.org/x/net/html: Infinite parsing loop in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44

golang.org/x/net CVE-2026-25680 中危 v0.38.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10

golang.org/x/sys CVE-2026-39824 未知 v0.31.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

opt/mise/installs/kustomize/5.8.1/kustomize (gobinary)
低危漏洞:2 中危漏洞:28 高危漏洞:23 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.24.0 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58

golang.org/x/text CVE-2026-56852 高危 v0.28.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27

stdlib CVE-2025-22874 高危 v1.24.0 1.24.4 crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22874

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 08:50

stdlib CVE-2025-61726 高危 v1.24.0 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-08-17 12:16

stdlib CVE-2025-61729 高危 v1.24.0 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50

stdlib CVE-2026-25679 高危 v1.24.0 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-08-17 12:17

stdlib CVE-2026-27145 高危 v1.24.0 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.24.0 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.24.0 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.24.0 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33811 高危 v1.24.0 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.24.0 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.24.0 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.24.0 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.24.0 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.24.0 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.24.0 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.24.0 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.24.0 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.24.0 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.24.0 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.24.0 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.24.0 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.24.0 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2025-0913 中危 v1.24.0 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27

stdlib CVE-2025-22870 中危 v1.24.0 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22871 中危 v1.24.0 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50

stdlib CVE-2025-22873 中危 v1.24.0 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50

stdlib CVE-2025-4673 中危 v1.24.0 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33

stdlib CVE-2025-47906 中危 v1.24.0 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47907 中危 v1.24.0 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28

stdlib CVE-2025-47912 中危 v1.24.0 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28

stdlib CVE-2025-58183 中危 v1.24.0 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58185 中危 v1.24.0 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58187 中危 v1.24.0 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58188 中危 v1.24.0 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-58189 中危 v1.24.0 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2025-61723 中危 v1.24.0 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61724 中危 v1.24.0 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61725 中危 v1.24.0 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61727 中危 v1.24.0 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61728 中危 v1.24.0 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2025-61730 中危 v1.24.0 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50

stdlib CVE-2026-27142 中危 v1.24.0 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

stdlib CVE-2026-32282 中危 v1.24.0 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.24.0 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.24.0 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.24.0 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.24.0 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.24.0 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.24.0 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.24.0 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2025-58186 低危 v1.24.0 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44

stdlib CVE-2026-27139 低危 v1.24.0 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

opt/mise/installs/node/24.19.0/lib/node_modules/typescript/node_modules/@typescript/typescript-linux-x64/lib/tsc (gobinary)
低危漏洞:0 中危漏洞:1 高危漏洞:10 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/text CVE-2026-56852 高危 v0.38.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27

stdlib CVE-2026-33818 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-46600 高危 v1.26.4 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-42505 中危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

opt/mise/installs/shfmt/3.13.1/shfmt (gobinary)
低危漏洞:0 中危漏洞:8 高危漏洞:20 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-27145 高危 v1.26.1 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32280 高危 v1.26.1 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-32281 高危 v1.26.1 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32283 高危 v1.26.1 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33810 高危 v1.26.1 1.26.2 crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33810

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33811 高危 v1.26.1 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33814 高危 v1.26.1 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-33818 高危 v1.26.1 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39820 高危 v1.26.1 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39821 高危 v1.26.1 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.26.1 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-39836 高危 v1.26.1 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42499 高危 v1.26.1 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-08-17 12:18

stdlib CVE-2026-42504 高危 v1.26.1 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-46600 高危 v1.26.1 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.1 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.1 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.1 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.1 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.1 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-32282 中危 v1.26.1 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32288 中危 v1.26.1 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-32289 中危 v1.26.1 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10

stdlib CVE-2026-39823 中危 v1.26.1 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39825 中危 v1.26.1 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-39826 中危 v1.26.1 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42

stdlib CVE-2026-42505 中危 v1.26.1 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.26.1 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

golang.org/x/sys CVE-2026-39824 未知 v0.42.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

opt/mise/installs/syft/1.51.0/syft (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:11 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-27145 高危 v1.26.3 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33818 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-42504 高危 v1.26.3 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-46600 高危 v1.26.3 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-42505 中危 v1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.26.3 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

golang.org/x/mod CVE-2026-56864 未知 v0.38.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

golang.org/x/mod CVE-2026-56865 未知 v0.38.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

golang.org/x/crypto GO-2026-5932 未知 v0.54.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

opt/mise/installs/terraform/1.15.8/terraform (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:13 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

golang.org/x/text CVE-2026-56852 高危 v0.37.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27

google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03

stdlib CVE-2026-27145 高危 v1.25.10 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-08-17 12:17

stdlib CVE-2026-33818 高危 v1.25.10 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.25.10 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-39822 高危 v1.25.10 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54

stdlib CVE-2026-42504 高危 v1.25.10 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

stdlib CVE-2026-56853 高危 v1.25.10 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.25.10 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.25.10 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.25.10 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.25.10 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-42505 中危 v1.25.10 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

stdlib CVE-2026-42507 中危 v1.25.10 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

golang.org/x/crypto GO-2026-5932 未知 v0.52.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

golang.org/x/mod CVE-2026-56864 未知 v0.35.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

golang.org/x/mod CVE-2026-56865 未知 v0.35.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

opt/mise/installs/trivy/0.74.0/trivy (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:eb06ec0bf9f570eb72698717b50e6b4dfd32272646a454f0ddee331a74a86195

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

opt/mise/installs/uv/0.12.5/uv-x86_64-unknown-linux-musl/uv (rustbinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/mise/installs/uv/0.12.5/uv-x86_64-unknown-linux-musl/uvx (rustbinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/abscissa_core-0.9.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/abscissa_derive-0.9.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/addr2line-0.25.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/adler2-2.0.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aho-corasick-1.1.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/annotate-snippets-0.11.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anstream-0.6.21/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anstream-1.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anstyle-1.0.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anstyle-parse-0.2.7/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anstyle-parse-1.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anstyle-query-1.1.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anyhow-1.0.102/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/arc-swap-1.9.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/arrayref-0.3.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/async-compression-0.4.41/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/async-compression-0.4.42/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/atty-0.2.14/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
atty GHSA-g98v-hv3f-hcfr 低危 0.2.14 atty potential unaligned read

漏洞详情: https://github.com/advisories/GHSA-g98v-hv3f-hcfr

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-06-30 20:21 修改: 2024-02-14 17:42

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/auditable-info-0.10.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/auditable-serde-0.9.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/autocfg-1.5.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aws-lc-rs-1.16.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/aws-lc-sys-0.40.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/backtrace-0.3.76/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/base64-0.22.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/base64ct-1.8.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/bitflags-2.11.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/blake3-1.8.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
cmov CVE-2026-50185 中危 0.5.2 0.5.4 RustCrypto CMOV provides conditional move CPU intrinsics which are gua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50185

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 19:17 修改: 2026-07-23 16:18

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/borsh-1.6.1/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.9.2 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/bstr-1.12.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/bytes-1.11.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/camino-1.2.2/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.9.2 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-0.91.0/Cargo.lock (cargo)
低危漏洞:7 中危漏洞:12 高危漏洞:13 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix CVE-2026-40034 高危 0.73.0 0.83.0 gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40034

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-26 15:16 修改: 2026-07-24 11:10

gix GHSA-fr8x-3vfx-f45h 高危 0.73.0 0.83.0 gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

漏洞详情: https://github.com/advisories/GHSA-fr8x-3vfx-f45h

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:27 修改: 2026-05-05 19:27

gix GHSA-p3hw-mv63-rf9w 高危 0.73.0 0.83.0 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix GHSA-pg4w-g64p-qwhj 高危 0.73.0 0.83.0 gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository

漏洞详情: https://github.com/advisories/GHSA-pg4w-g64p-qwhj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:26 修改: 2026-05-05 19:26

gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-pack GHSA-x494-mj8g-cj27 高危 0.60.0 0.69.0 gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data

漏洞详情: https://github.com/advisories/GHSA-x494-mj8g-cj27

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:24 修改: 2026-05-05 19:24

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

openssl CVE-2026-41676 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.73 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.4 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

gix-transport GHSA-9857-6mw7-fq2m 中危 0.48.0 0.56.0 gix-transport: HTTP credentials leaked to redirected host in curl backend

漏洞详情: https://github.com/advisories/GHSA-9857-6mw7-fq2m

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:16 修改: 2026-05-05 19:16

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

openssl CVE-2026-44662 中危 0.10.73 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

openssl CVE-2026-45784 中危 0.10.73 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

cargo CVE-2026-5223 中危 0.91.0 0.97.0 cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5223

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-25 10:16 修改: 2026-07-23 17:10

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.4 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

slab CVE-2025-55159 中危 0.4.10 0.4.11 slab: Slab: Out-of-bounds Memory Access Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55159

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-11 23:15 修改: 2026-06-17 09:41

tar CVE-2026-33055 中危 0.4.44 0.4.45 tar-rs is a tar archive reading/writing library for Rust. Versions 0.4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33055

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 07:16 修改: 2026-06-17 10:36

tar CVE-2026-33056 中危 0.4.44 0.4.45 tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33056

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 08:16 修改: 2026-06-17 10:36

tar GHSA-3pv8-6f4r-ffg2 中危 0.4.44 0.4.46 tar has a PAX header desynchronization issue

漏洞详情: https://github.com/advisories/GHSA-3pv8-6f4r-ffg2

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-29 19:16 修改: 2026-05-29 19:16

time CVE-2026-25727 中危 0.3.41 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.4 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

openssl CVE-2026-41677 低危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

rand GHSA-cq8v-f236-94qc 低危 0.9.1 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

cargo CVE-2026-5222 低危 0.91.0 0.97.0 Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5222

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-25 10:16 修改: 2026-07-23 17:10

git2 GHSA-j39j-6gw9-jw6h 低危 0.20.2 0.20.4 git2 has potential undefined behavior when dereferencing Buf struct

漏洞详情: https://github.com/advisories/GHSA-j39j-6gw9-jw6h

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 20:36 修改: 2026-02-04 20:36

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.4 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

tracing-subscriber CVE-2025-58160 低危 0.3.19 0.3.20 tracing-subscriber: Tracing log pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58160

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-29 22:15 修改: 2026-06-17 09:44

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-audit-0.22.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-credential-0.4.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
time CVE-2026-25727 中危 0.3.41 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-credential-libsecret-0.5.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
time CVE-2026-25727 中危 0.3.41 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-edit-0.13.13/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.12 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

atty GHSA-g98v-hv3f-hcfr 低危 0.2.14 atty potential unaligned read

漏洞详情: https://github.com/advisories/GHSA-g98v-hv3f-hcfr

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-06-30 20:21 修改: 2024-02-14 17:42

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-lock-11.0.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-lock-11.0.1/tests/examples/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
idna CVE-2024-12224 中危 0.2.3 1.0.0 idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12224

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-05-30 02:15 修改: 2026-06-17 06:59

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-outdated-0.19.0/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:6 高危漏洞:12 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix CVE-2026-40034 高危 0.73.0 0.83.0 gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40034

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-26 15:16 修改: 2026-07-24 11:10

gix GHSA-fr8x-3vfx-f45h 高危 0.73.0 0.83.0 gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

漏洞详情: https://github.com/advisories/GHSA-fr8x-3vfx-f45h

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:27 修改: 2026-05-05 19:27

gix GHSA-p3hw-mv63-rf9w 高危 0.73.0 0.83.0 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix GHSA-pg4w-g64p-qwhj 高危 0.73.0 0.83.0 gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository

漏洞详情: https://github.com/advisories/GHSA-pg4w-g64p-qwhj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:26 修改: 2026-05-05 19:26

gix-fs CVE-2026-44471 高危 0.16.1 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-pack GHSA-x494-mj8g-cj27 高危 0.60.0 0.69.0 gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data

漏洞详情: https://github.com/advisories/GHSA-x494-mj8g-cj27

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:24 修改: 2026-05-05 19:24

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.1 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

openssl CVE-2026-41676 高危 0.10.77 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.77 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.77 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.77 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.77 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

cargo CVE-2026-5223 中危 0.91.0 0.97.0 cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5223

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-25 10:16 修改: 2026-07-23 17:10

gix-date CVE-2026-0810 中危 0.10.7 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

gix-transport GHSA-9857-6mw7-fq2m 中危 0.48.0 0.56.0 gix-transport: HTTP credentials leaked to redirected host in curl backend

漏洞详情: https://github.com/advisories/GHSA-9857-6mw7-fq2m

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:16 修改: 2026-05-05 19:16

openssl CVE-2026-44662 中危 0.10.77 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

openssl CVE-2026-45784 中危 0.10.77 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

tar GHSA-3pv8-6f4r-ffg2 中危 0.4.45 0.4.46 tar has a PAX header desynchronization issue

漏洞详情: https://github.com/advisories/GHSA-3pv8-6f4r-ffg2

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-29 19:16 修改: 2026-05-29 19:16

openssl CVE-2026-41677 低危 0.10.77 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

cargo CVE-2026-5222 低危 0.91.0 0.97.0 Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5222

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-25 10:16 修改: 2026-07-23 17:10

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-platform-0.3.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-util-0.2.23/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo-util-schemas-0.10.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cargo_metadata-0.23.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cc-1.2.60/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cc-1.2.62/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cfg-if-1.0.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap-4.6.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap-4.6.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap-cargo-0.18.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap-verbosity-flag-3.0.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap_builder-4.6.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap_complete-4.6.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap_derive-4.6.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap_derive-4.6.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clap_lex-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/clru-0.6.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cmake-0.1.58/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/color-eyre-0.6.5/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
idna CVE-2024-12224 中危 0.5.0 1.0.0 idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12224

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-05-30 02:15 修改: 2026-06-17 06:59

tracing-subscriber CVE-2025-58160 低危 0.3.18 0.3.20 tracing-subscriber: Tracing log pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58160

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-29 22:15 修改: 2026-06-17 09:44

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/colorchoice-1.0.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/compression-codecs-0.4.37/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/compression-codecs-0.4.38/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/compression-core-0.4.31/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/compression-core-0.4.32/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/constant_time_eq-0.4.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cpufeatures-0.2.17/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cpufeatures-0.3.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/crates-io-0.40.13/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/crc32fast-1.5.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/crossbeam-channel-0.5.15/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/crossbeam-epoch-0.9.18/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tracing-subscriber CVE-2025-58160 低危 0.3.18 0.3.20 tracing-subscriber: Tracing log pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58160

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-29 22:15 修改: 2026-06-17 09:44

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/crypto-common-0.1.7/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/ct-codecs-1.1.6/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/curl-0.4.49/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:3 高危漏洞:5 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-sys GHSA-65p9-r9h6-22vj 高危 0.25.1 0.38.0 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-sys GHSA-9f94-5g5w-gf6r 高危 0.25.1 0.39.0 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-hfpc-8r3f-gw53 高危 0.25.1 0.38.0 AWS-LC has PKCS7_verify Signature Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-hfpc-8r3f-gw53

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:25 修改: 2026-03-25 18:31

aws-lc-sys GHSA-vw5v-4f2q-w9xf 高危 0.25.1 0.38.0 AWS-LC has PKCS7_verify Certificate Chain Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-vw5v-4f2q-w9xf

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:08 修改: 2026-03-25 18:29

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.3 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

ring CVE-2025-4432 中危 0.17.7 0.17.12 ring: Some AES functions may panic when overflow checking is enabled in ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4432

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-05-09 16:15 修改: 2026-06-30 11:16

bytes CVE-2026-25541 中危 1.10.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.3 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/curl-sys-0.4.87+curl-8.19.0/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.10 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.10 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.10 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/cvss-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/der-0.7.10/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:2 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.4.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

time CVE-2026-25727 中危 0.3.23 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/deranged-0.5.8/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.8.5 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/displaydoc-0.2.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/ed25519-compact-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/either-1.15.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/env_filter-1.0.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/env_logger-0.11.10/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/equivalent-1.0.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/erased-serde-0.4.10/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/errno-0.3.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/eyre-0.6.12/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
pyo3 GHSA-36hh-v3qg-5jq4 高危 0.20.0 0.29.0 PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators

漏洞详情: https://github.com/advisories/GHSA-36hh-v3qg-5jq4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-12 19:32 修改: 2026-06-12 19:32

pyo3 GHSA-chgr-c6px-7xpp 中危 0.20.0 0.29.0 PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures

漏洞详情: https://github.com/advisories/GHSA-chgr-c6px-7xpp

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-06-12 20:09 修改: 2026-06-12 20:09

pyo3 GHSA-pph8-gcv7-4qj5 低危 0.20.0 0.24.1 PyO3 Risk of buffer overflow in `PyString::from_object`

漏洞详情: https://github.com/advisories/GHSA-pph8-gcv7-4qj5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-04-02 13:19 修改: 2025-04-02 13:19

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/fastrand-2.4.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/fiat-crypto-0.3.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/filetime-0.2.27/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/filetime-0.2.28/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/find-msvc-tools-0.1.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/flate2-1.1.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/foldhash-0.1.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/foldhash-0.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/form_urlencoded-1.2.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/fs-err-3.3.0/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tokio GHSA-rr8g-9fpq-6wmg 低危 1.40.0 1.44.2, 1.38.2, 1.43.1 Tokio broadcast channel calls clone in parallel, but does not require `Sync`

漏洞详情: https://github.com/advisories/GHSA-rr8g-9fpq-6wmg

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-04-07 21:12 修改: 2025-04-07 21:12

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-channel-0.3.32/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-core-0.3.32/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-io-0.3.32/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-sink-0.3.32/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-task-0.3.32/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/futures-util-0.3.32/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/generic-array-0.14.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/getrandom-0.2.17/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/getrandom-0.3.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/getrandom-0.4.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gimli-0.32.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/git2-0.20.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-0.73.0/Cargo.lock (cargo)
低危漏洞:4 中危漏洞:7 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-sys GHSA-65p9-r9h6-22vj 高危 0.29.0 0.38.0 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-sys GHSA-9f94-5g5w-gf6r 高危 0.29.0 0.39.0 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-hfpc-8r3f-gw53 高危 0.29.0 0.38.0 AWS-LC has PKCS7_verify Signature Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-hfpc-8r3f-gw53

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:25 修改: 2026-03-25 18:31

aws-lc-sys GHSA-vw5v-4f2q-w9xf 高危 0.29.0 0.38.0 AWS-LC has PKCS7_verify Certificate Chain Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-vw5v-4f2q-w9xf

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:08 修改: 2026-03-25 18:29

gix CVE-2026-40034 高危 0.73.0 0.83.0 gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40034

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-26 15:16 修改: 2026-07-24 11:10

gix GHSA-fr8x-3vfx-f45h 高危 0.73.0 0.83.0 gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

漏洞详情: https://github.com/advisories/GHSA-fr8x-3vfx-f45h

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:27 修改: 2026-05-05 19:27

gix GHSA-p3hw-mv63-rf9w 高危 0.73.0 0.83.0 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix GHSA-pg4w-g64p-qwhj 高危 0.73.0 0.83.0 gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository

漏洞详情: https://github.com/advisories/GHSA-pg4w-g64p-qwhj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:26 修改: 2026-05-05 19:26

gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-pack GHSA-x494-mj8g-cj27 高危 0.60.0 0.69.0 gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data

漏洞详情: https://github.com/advisories/GHSA-x494-mj8g-cj27

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:24 修改: 2026-05-05 19:24

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

openssl CVE-2026-41676 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.73 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

quinn-proto CVE-2026-31812 高危 0.11.12 0.11.14 quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31812

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-10 22:16 修改: 2026-08-11 13:18

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.12 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.3 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

openssl CVE-2026-44662 中危 0.10.73 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

openssl CVE-2026-45784 中危 0.10.73 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

gix-transport GHSA-9857-6mw7-fq2m 中危 0.48.0 0.56.0 gix-transport: HTTP credentials leaked to redirected host in curl backend

漏洞详情: https://github.com/advisories/GHSA-9857-6mw7-fq2m

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:16 修改: 2026-05-05 19:16

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.3 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

slab CVE-2025-55159 中危 0.4.10 0.4.11 slab: Slab: Out-of-bounds Memory Access Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55159

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-11 23:15 修改: 2026-06-17 09:41

rand GHSA-cq8v-f236-94qc 低危 0.9.1 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

openssl CVE-2026-41677 低危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-0.84.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:2 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
hickory-proto GHSA-3v94-mw7p-v465 高危 0.25.2 hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

漏洞详情: https://github.com/advisories/GHSA-3v94-mw7p-v465

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

openssl CVE-2026-45784 中危 0.10.79 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

hickory-proto GHSA-q2qq-hmj6-3wpp 中危 0.25.2 0.26.1 hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

漏洞详情: https://github.com/advisories/GHSA-q2qq-hmj6-3wpp

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-actor-0.35.6/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-date CVE-2026-0810 中危 0.10.7 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-actor-0.41.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-attributes-0.27.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-attributes-0.33.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-bitmap-0.2.16/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-bitmap-0.3.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-chunk-0.4.12/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-chunk-0.7.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-command-0.6.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.1 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-command-0.9.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-commitgraph-0.29.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-commitgraph-0.37.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-config-0.46.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-config-0.57.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-config-value-0.15.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.1 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-config-value-0.18.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-credentials-0.30.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-credentials-0.38.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-date-0.10.7/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-date CVE-2026-0810 中危 0.10.7 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-date-0.15.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-diff-0.53.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-diff-0.64.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-dir-0.15.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-discover-0.41.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-discover-0.52.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-error-0.2.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-features-0.43.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-features-0.48.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-filter-0.20.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-filter-0.31.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-fs-0.16.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.1 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-fs-0.21.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-glob-0.21.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-glob-0.26.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-hash-0.19.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-hash-0.25.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-hashtable-0.15.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-hashtable-0.9.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-ignore-0.16.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-ignore-0.21.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-index-0.41.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-index-0.52.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-lock-18.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-lock-23.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.21.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-negotiate-0.21.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-negotiate-0.32.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-object-0.50.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.5 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-object-0.61.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-odb-0.70.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-pack GHSA-x494-mj8g-cj27 高危 0.60.0 0.69.0 gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data

漏洞详情: https://github.com/advisories/GHSA-x494-mj8g-cj27

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:24 修改: 2026-05-05 19:24

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-odb-0.81.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-pack-0.60.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-pack GHSA-x494-mj8g-cj27 高危 0.60.0 0.69.0 gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data

漏洞详情: https://github.com/advisories/GHSA-x494-mj8g-cj27

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:24 修改: 2026-05-05 19:24

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-pack-0.71.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-packetline-0.19.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-packetline-0.21.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-packetline-blocking-0.19.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-path-0.10.22/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.1 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-path-0.12.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-pathspec-0.12.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-pathspec-0.18.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-prompt-0.11.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.1 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-prompt-0.15.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-protocol-0.51.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:2 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-transport GHSA-9857-6mw7-fq2m 中危 0.48.0 0.56.0 gix-transport: HTTP credentials leaked to redirected host in curl backend

漏洞详情: https://github.com/advisories/GHSA-9857-6mw7-fq2m

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:16 修改: 2026-05-05 19:16

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-protocol-0.62.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-quote-0.6.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-quote-0.7.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-ref-0.53.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.1 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.5 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-ref-0.64.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-refspec-0.31.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-refspec-0.42.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-revision-0.35.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-revision-0.46.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-revwalk-0.21.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-revwalk-0.32.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-sec-0.12.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.1 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-sec-0.14.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-shallow-0.12.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-shallow-0.5.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-status-0.20.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-submodule-0.20.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-submodule-0.31.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-tempfile-18.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-tempfile-23.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.21.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-trace-0.1.18/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-trace-0.1.20/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-transport-0.48.0/Cargo.lock (cargo)
低危漏洞:4 中危漏洞:7 高危漏洞:13 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-sys GHSA-65p9-r9h6-22vj 高危 0.29.0 0.38.0 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-sys GHSA-9f94-5g5w-gf6r 高危 0.29.0 0.39.0 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-hfpc-8r3f-gw53 高危 0.29.0 0.38.0 AWS-LC has PKCS7_verify Signature Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-hfpc-8r3f-gw53

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:25 修改: 2026-03-25 18:31

aws-lc-sys GHSA-vw5v-4f2q-w9xf 高危 0.29.0 0.38.0 AWS-LC has PKCS7_verify Certificate Chain Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-vw5v-4f2q-w9xf

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:08 修改: 2026-03-25 18:29

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

openssl CVE-2026-41676 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.73 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

quinn-proto CVE-2026-31812 高危 0.11.12 0.11.14 quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31812

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-10 22:16 修改: 2026-08-11 13:18

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.12 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.3 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

openssl CVE-2026-44662 中危 0.10.73 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

openssl CVE-2026-45784 中危 0.10.73 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

gix-transport GHSA-9857-6mw7-fq2m 中危 0.48.0 0.56.0 gix-transport: HTTP credentials leaked to redirected host in curl backend

漏洞详情: https://github.com/advisories/GHSA-9857-6mw7-fq2m

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:16 修改: 2026-05-05 19:16

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.3 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

slab CVE-2025-55159 中危 0.4.10 0.4.11 slab: Slab: Out-of-bounds Memory Access Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55159

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-11 23:15 修改: 2026-06-17 09:41

rand GHSA-cq8v-f236-94qc 低危 0.9.1 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

openssl CVE-2026-41677 低危 0.10.73 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-transport-0.57.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:2 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
hickory-proto GHSA-3v94-mw7p-v465 高危 0.25.2 hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

漏洞详情: https://github.com/advisories/GHSA-3v94-mw7p-v465

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

openssl CVE-2026-45784 中危 0.10.79 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

hickory-proto GHSA-q2qq-hmj6-3wpp 中危 0.25.2 0.26.1 hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

漏洞详情: https://github.com/advisories/GHSA-q2qq-hmj6-3wpp

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-traverse-0.47.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-traverse-0.58.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-url-0.32.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-url-0.36.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-utils-0.3.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-utils-0.3.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-validate-0.10.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.1 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-validate-0.11.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-worktree-0.42.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix-fs CVE-2026-44471 高危 0.16.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix-date CVE-2026-0810 中危 0.10.3 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-worktree-0.53.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-worktree-state-0.31.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/gix-worktree-stream-0.33.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/glob-0.3.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/globset-0.4.18/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/h2-0.4.13/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.11.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/h2-0.4.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.11.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hash32-0.3.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hashbrown-0.15.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hashbrown-0.16.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hashbrown-0.17.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hashbrown-0.17.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/home-0.5.12/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/http-1.4.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.11.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/http-auth-0.1.10/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.7.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

rand GHSA-cq8v-f236-94qc 低危 0.8.5 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/http-body-util-0.1.3/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tokio CVE-2023-22466 中危 1.21.0 1.18.4, 1.20.3, 1.23.1 Tokio is a runtime for writing applications with Rust. Starting with v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22466

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-01-04 22:15 修改: 2026-06-17 05:35

tokio GHSA-4q83-7cq4-p6wg 低危 1.21.0 1.24.2, 1.20.4, 1.18.5 `tokio::io::ReadHalf<T>::unsplit` is Unsound

漏洞详情: https://github.com/advisories/GHSA-4q83-7cq4-p6wg

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-02-04 00:30 修改: 2023-02-04 00:30

tokio GHSA-rr8g-9fpq-6wmg 低危 1.21.0 1.44.2, 1.38.2, 1.43.1 Tokio broadcast channel calls clone in parallel, but does not require `Sync`

漏洞详情: https://github.com/advisories/GHSA-rr8g-9fpq-6wmg

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-04-07 21:12 修改: 2025-04-07 21:12

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/httparse-1.10.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-1.9.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.11.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-rustls-0.27.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.12 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hyper-util-0.1.20/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_collections-2.1.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_collections-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_locale_core-2.1.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_locale_core-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_normalizer-2.1.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_normalizer-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_normalizer_data-2.1.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_normalizer_data-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_properties-2.1.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_properties-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_properties_data-2.1.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_properties_data-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_provider-2.1.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/icu_provider-2.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/idna-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/idna_adapter-1.2.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/ignore-0.4.25/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/indenter-0.3.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/indexmap-2.14.0/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.10.0 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/ipnet-2.12.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/iri-string-0.7.12/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/is_executable-1.0.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/is_terminal_polyfill-1.70.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/itertools-0.14.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/itoa-1.0.18/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/jiff-0.2.23/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/jiff-0.2.28/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/jiff-static-0.2.23/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/jiff-static-0.2.28/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/jobserver-0.1.34/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/kstring-2.0.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/lazy_static-1.5.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libc-0.2.185/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libc-0.2.186/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libgit2-sys-0.18.3+1.9.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libloading-0.8.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libnghttp2-sys-0.1.13+1.68.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libsqlite3-sys-0.34.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libssh2-sys-0.3.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:3 高危漏洞:7 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
openssl-src CVE-2021-3711 严重 111.10.2+1.1.1g 111.16.0 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl-src CVE-2021-23840 高危 111.10.2+1.1.1g 111.14.0 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl-src CVE-2021-3712 高危 111.10.2+1.1.1g 111.16.0 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl-src CVE-2022-0778 高危 111.10.2+1.1.1g 300.0.5, 111.18.0 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

openssl-src CVE-2022-2097 高危 111.10.2+1.1.1g 111.22.0, 300.0.9 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

openssl-src CVE-2022-4450 高危 111.10.2+1.1.1g 111.25.0, 300.0.12 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl-src CVE-2023-0215 高危 111.10.2+1.1.1g 111.25.0, 300.0.12 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl-src CVE-2023-0286 高危 111.10.2+1.1.1g 111.25.0, 300.0.12 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl-src CVE-2021-23841 中危 111.10.2+1.1.1g 111.14.0 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl-src CVE-2021-3449 中危 111.10.2+1.1.1g 111.15.0 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05

openssl-src CVE-2022-4304 中危 111.10.2+1.1.1g 111.25.0, 300.0.12 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libz-sys-1.1.28/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/linux-raw-sys-0.12.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/litemap-0.8.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/lock_api-0.4.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
owning_ref GHSA-9qxh-258v-666c 中危 0.4.1 owning_ref vulnerable to multiple soundness issues

漏洞详情: https://github.com/advisories/GHSA-9qxh-258v-666c

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2022-08-10 17:26 修改: 2022-08-10 17:26

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/log-0.4.29/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/lru-slab-0.1.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/maybe-async-0.2.10/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/memchr-2.8.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/memmap2-0.9.10/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/miniz_oxide-0.8.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/mio-1.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/nix-0.30.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/nom-7.1.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/nonempty-0.12.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/nu-ansi-term-0.50.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/num-conv-0.2.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/object-0.37.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/object-0.39.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/once_cell-1.21.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/opener-0.8.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/openssl-probe-0.1.6/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/openssl-probe-0.2.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/openssl-sys-0.9.113/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-fips-sys GHSA-65p9-r9h6-22vj 高危 0.13.8 0.13.12 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-fips-sys GHSA-9f94-5g5w-gf6r 高危 0.13.8 0.13.13 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/orion-0.17.13/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/os_info-3.14.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/owo-colors-4.3.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/p384-0.13.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/parking_lot-0.12.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
owning_ref GHSA-9qxh-258v-666c 中危 0.4.1 owning_ref vulnerable to multiple soundness issues

漏洞详情: https://github.com/advisories/GHSA-9qxh-258v-666c

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2022-08-10 17:26 修改: 2022-08-10 17:26

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/parking_lot_core-0.9.12/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/pasetors-0.7.8/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/percent-encoding-2.3.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/petgraph-0.8.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/pin-project-lite-0.2.17/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/pkg-config-0.3.33/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/platforms-3.10.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/potential_utf-0.1.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/proc-macro2-1.0.106/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/prodash-30.0.1/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
lru GHSA-rhfx-m35p-ff5j 低危 0.12.5 0.16.3 `IterMut` violates Stacked Borrows by invalidating internal pointer

漏洞详情: https://github.com/advisories/GHSA-rhfx-m35p-ff5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-07 20:38 修改: 2026-01-07 20:38

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/prodash-31.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
time CVE-2026-25727 中危 0.3.44 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/quinn-0.11.9/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:2 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-fips-sys GHSA-65p9-r9h6-22vj 高危 0.13.7 0.13.12 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-fips-sys GHSA-9f94-5g5w-gf6r 高危 0.13.7 0.13.13 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-65p9-r9h6-22vj 高危 0.30.0 0.38.0 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-sys GHSA-9f94-5g5w-gf6r 高危 0.30.0 0.39.0 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-hfpc-8r3f-gw53 高危 0.30.0 0.38.0 AWS-LC has PKCS7_verify Signature Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-hfpc-8r3f-gw53

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:25 修改: 2026-03-25 18:31

aws-lc-sys GHSA-vw5v-4f2q-w9xf 高危 0.30.0 0.38.0 AWS-LC has PKCS7_verify Certificate Chain Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-vw5v-4f2q-w9xf

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:08 修改: 2026-03-25 18:29

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.4 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.4 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.4 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.4 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/quinn-proto-0.11.14/Cargo.lock (cargo)
低危漏洞:3 中危漏洞:2 高危漏洞:5 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-fips-sys GHSA-9f94-5g5w-gf6r 高危 0.13.12 0.13.13 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-394x-vwmw-crm3 高危 0.38.0 0.39.0 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN

漏洞详情: https://github.com/advisories/GHSA-394x-vwmw-crm3

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:34 修改: 2026-03-20 20:34

aws-lc-sys GHSA-9f94-5g5w-gf6r 高危 0.38.0 0.39.0 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.9 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.9 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

serde_with GHSA-7gcf-g7xr-8hxj 中危 3.14.1 3.21.0 serde_with: KeyValueMap serialization panics on empty sequence or map entries

漏洞详情: https://github.com/advisories/GHSA-7gcf-g7xr-8hxj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-15 22:41 修改: 2026-07-15 22:41

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.9 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.9 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

rand GHSA-cq8v-f236-94qc 低危 0.9.2 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/quinn-udp-0.5.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/quitters-0.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/quote-1.0.45/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rand-0.9.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rand_chacha-0.9.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rand_core-0.9.5/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-core-1.13.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/regex-1.12.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/regex-automata-0.4.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/regex-syntax-0.8.10/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/reqwest-0.12.28/Cargo.lock (cargo)
低危漏洞:4 中危漏洞:6 高危漏洞:9 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
hickory-proto GHSA-3v94-mw7p-v465 高危 0.25.2 hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

漏洞详情: https://github.com/advisories/GHSA-3v94-mw7p-v465

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

openssl CVE-2026-41676 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.75 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

quinn-proto CVE-2026-31812 高危 0.11.13 0.11.14 quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31812

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-10 22:16 修改: 2026-08-11 13:18

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.13 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.8 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

openssl CVE-2026-45784 中危 0.10.75 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

hickory-proto GHSA-q2qq-hmj6-3wpp 中危 0.25.2 0.26.1 hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

漏洞详情: https://github.com/advisories/GHSA-q2qq-hmj6-3wpp

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

bytes CVE-2026-25541 中危 1.11.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

openssl CVE-2026-44662 中危 0.10.75 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.8 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

time CVE-2026-25727 中危 0.3.44 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

rand GHSA-cq8v-f236-94qc 低危 0.9.2 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.8 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.8 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

openssl CVE-2026-41677 低危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/reqwest-0.13.3/Cargo.lock (cargo)
低危漏洞:4 中危漏洞:6 高危漏洞:14 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-sys GHSA-394x-vwmw-crm3 高危 0.35.0 0.39.0 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN

漏洞详情: https://github.com/advisories/GHSA-394x-vwmw-crm3

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:34 修改: 2026-03-20 20:34

aws-lc-sys GHSA-65p9-r9h6-22vj 高危 0.35.0 0.38.0 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-sys GHSA-9f94-5g5w-gf6r 高危 0.35.0 0.39.0 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-hfpc-8r3f-gw53 高危 0.35.0 0.38.0 AWS-LC has PKCS7_verify Signature Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-hfpc-8r3f-gw53

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:25 修改: 2026-03-25 18:31

aws-lc-sys GHSA-vw5v-4f2q-w9xf 高危 0.35.0 0.38.0 AWS-LC has PKCS7_verify Certificate Chain Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-vw5v-4f2q-w9xf

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:08 修改: 2026-03-25 18:29

hickory-proto GHSA-3v94-mw7p-v465 高危 0.25.2 hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

漏洞详情: https://github.com/advisories/GHSA-3v94-mw7p-v465

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

openssl CVE-2026-41676 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.75 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

quinn-proto CVE-2026-31812 高危 0.11.13 0.11.14 quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31812

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-10 22:16 修改: 2026-08-11 13:18

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.13 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.8 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

openssl CVE-2026-45784 中危 0.10.75 0.10.80 rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45784

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-17 21:17 修改: 2026-07-29 15:43

hickory-proto GHSA-q2qq-hmj6-3wpp 中危 0.25.2 0.26.1 hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

漏洞详情: https://github.com/advisories/GHSA-q2qq-hmj6-3wpp

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-07 02:59 修改: 2026-05-07 02:59

bytes CVE-2026-25541 中危 1.11.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

openssl CVE-2026-44662 中危 0.10.75 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.8 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

time CVE-2026-25727 中危 0.3.44 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

rand GHSA-cq8v-f236-94qc 低危 0.9.2 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.8 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.8 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

openssl CVE-2026-41677 低危 0.10.75 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/ring-0.17.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bumpalo GHSA-f85w-wvc7-crwc 中危 3.7.0 3.11.1 bumpalo has use-after-free due to a lifetime error in `Vec::into_iter()`

漏洞详情: https://github.com/advisories/GHSA-f85w-wvc7-crwc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2023-01-20 21:54 修改: 2023-01-20 21:54

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rusqlite-0.36.0/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
time CVE-2026-25727 中危 0.3.41 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

rand GHSA-cq8v-f236-94qc 低危 0.8.5 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustc-demangle-0.1.27/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustc-hash-2.1.2/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.8.5 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustc-stable-hash-0.1.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustfix-0.9.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustix-1.1.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-0.23.38/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-0.23.40/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-native-certs-0.8.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-pki-types-1.14.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-pki-types-1.14.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-platform-verifier-0.7.0/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.10 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.10 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.10 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-webpki-0.103.12/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.12 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustls-webpki-0.103.13/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustsec-0.33.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustversion-1.0.22/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/ryu-1.0.23/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/same-file-1.0.6/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/scopeguard-1.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/semver-1.0.28/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/serde-1.0.228/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/serde-untagged-0.1.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/serde_core-1.0.228/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/serde_derive-1.0.228/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/serde_ignored-0.1.14/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/serde_json-1.0.149/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/serde_spanned-1.1.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/sha2-0.10.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/shell-words-1.1.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/simd-adler32-0.3.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/slab-0.4.12/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/smallvec-1.15.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/smol_str-0.3.6/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/socket2-0.6.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/stable_deref_trait-1.2.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/strum-0.28.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/strum_macros-0.28.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/supports-hyperlinks-3.2.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/syn-2.0.117/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/synstructure-0.13.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tame-index-0.22.0/Cargo.lock (cargo)
低危漏洞:3 中危漏洞:4 高危漏洞:10 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gix CVE-2026-40034 高危 0.72.1 0.83.0 gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40034

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-26 15:16 修改: 2026-07-24 11:10

gix GHSA-fr8x-3vfx-f45h 高危 0.72.1 0.83.0 gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

漏洞详情: https://github.com/advisories/GHSA-fr8x-3vfx-f45h

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:27 修改: 2026-05-05 19:27

gix GHSA-p3hw-mv63-rf9w 高危 0.72.1 0.83.0 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

gix GHSA-pg4w-g64p-qwhj 高危 0.72.1 0.83.0 gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository

漏洞详情: https://github.com/advisories/GHSA-pg4w-g64p-qwhj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:26 修改: 2026-05-05 19:26

gix-fs CVE-2026-44471 高危 0.15.0 0.21.1 gitoxide is an implementation of git written in Rust. Prior to 0.21.1, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44471

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-13 22:16 修改: 2026-06-17 10:50

gix-pack GHSA-x494-mj8g-cj27 高危 0.59.1 0.69.0 gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data

漏洞详情: https://github.com/advisories/GHSA-x494-mj8g-cj27

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:24 修改: 2026-05-05 19:24

gix-validate GHSA-p3hw-mv63-rf9w 高危 0.10.0 0.11.1 gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

漏洞详情: https://github.com/advisories/GHSA-p3hw-mv63-rf9w

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:20 修改: 2026-05-05 19:20

quinn-proto CVE-2026-31812 高危 0.11.12 0.11.14 quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31812

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-10 22:16 修改: 2026-08-11 13:18

quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.12 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.3 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

gix-date CVE-2026-0810 中危 0.10.2 0.12.0 gix-date: gix-date: Undefined behavior due to invalid string generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0810

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:11

gix-transport GHSA-9857-6mw7-fq2m 中危 0.47.0 0.56.0 gix-transport: HTTP credentials leaked to redirected host in curl backend

漏洞详情: https://github.com/advisories/GHSA-9857-6mw7-fq2m

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-05 19:16 修改: 2026-05-05 19:16

bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.3 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

rand GHSA-cq8v-f236-94qc 低危 0.9.1 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.3 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tame-index-0.26.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tar-0.4.45/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tar GHSA-3pv8-6f4r-ffg2 中危 0.4.45 0.4.46 tar has a PAX header desynchronization issue

漏洞详情: https://github.com/advisories/GHSA-3pv8-6f4r-ffg2

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-29 19:16 修改: 2026-05-29 19:16

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tempfile-3.27.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/terminal_size-0.4.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/thiserror-2.0.18/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/thiserror-impl-2.0.18/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/thread_local-1.1.9/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/time-0.3.47/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.8.5 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

rand GHSA-cq8v-f236-94qc 低危 0.9.2 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/time-core-0.1.8/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/time-macros-0.2.27/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tinystr-0.8.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tinyvec-1.11.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.52.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.52.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-rustls-0.26.4/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:2 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aws-lc-fips-sys GHSA-65p9-r9h6-22vj 高危 0.13.7 0.13.12 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-fips-sys GHSA-9f94-5g5w-gf6r 高危 0.13.7 0.13.13 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-65p9-r9h6-22vj 高危 0.31.0 0.38.0 AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

漏洞详情: https://github.com/advisories/GHSA-65p9-r9h6-22vj

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:09 修改: 2026-03-25 18:26

aws-lc-sys GHSA-9f94-5g5w-gf6r 高危 0.31.0 0.39.0 CRL Distribution Point Scope Check Logic Error in AWS-LC

漏洞详情: https://github.com/advisories/GHSA-9f94-5g5w-gf6r

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 20:35 修改: 2026-03-20 20:35

aws-lc-sys GHSA-hfpc-8r3f-gw53 高危 0.31.0 0.38.0 AWS-LC has PKCS7_verify Signature Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-hfpc-8r3f-gw53

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:25 修改: 2026-03-25 18:31

aws-lc-sys GHSA-vw5v-4f2q-w9xf 高危 0.31.0 0.38.0 AWS-LC has PKCS7_verify Certificate Chain Validation Bypass

漏洞详情: https://github.com/advisories/GHSA-vw5v-4f2q-w9xf

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-03 20:08 修改: 2026-03-25 18:29

rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.103.6 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20

bytes CVE-2026-25541 中危 1.10.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.103.6 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56

rustls-webpki GHSA-965h-392x-2mh5 低危 0.103.6 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16

rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.103.6 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-util-0.7.18/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
hashbrown GHSA-wwq9-3cpr-mm53 高危 0.15.0 0.15.1 Borsh serialization of HashMap is non-canonical

漏洞详情: https://github.com/advisories/GHSA-wwq9-3cpr-mm53

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2024-12-04 18:29 修改: 2024-12-04 18:29

bytes CVE-2026-25541 中危 1.8.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml-0.9.12+spec-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml-1.1.2+spec-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml-span-0.5.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml-span-0.7.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml_datetime-0.7.5+spec-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml_datetime-1.1.1+spec-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml_edit-0.23.10+spec-1.0.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml_edit-0.25.11+spec-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml_parser-1.1.2+spec-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/toml_writer-1.1.1+spec-1.1.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-0.5.3/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.9.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

tokio GHSA-rr8g-9fpq-6wmg 低危 1.42.0 1.44.2, 1.38.2, 1.43.1 Tokio broadcast channel calls clone in parallel, but does not require `Sync`

漏洞详情: https://github.com/advisories/GHSA-rr8g-9fpq-6wmg

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-04-07 21:12 修改: 2025-04-07 21:12

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-http-0.6.10/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tower-http-0.6.8/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bytes CVE-2026-25541 中危 1.8.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tracing-0.1.44/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tracing-attributes-0.1.31/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tracing-chrome-0.7.2/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tracing-subscriber CVE-2025-58160 低危 0.3.18 0.3.20 tracing-subscriber: Tracing log pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58160

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-08-29 22:15 修改: 2026-06-17 09:44

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tracing-core-0.1.36/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tracing-subscriber-0.3.23/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
time CVE-2026-25727 中危 0.3.44 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/twox-hash-2.1.2/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.9.2 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/typeid-1.0.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/typenum-1.19.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/typenum-1.20.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/unicase-2.9.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/unicode-ident-1.0.24/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/unicode-normalization-0.1.25/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/unicode-width-0.2.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/url-2.5.8/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/wait-timeout-0.2.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/wasmparser-0.207.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/wasmparser-0.247.0/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/webpki-roots-1.0.7/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/winnow-0.7.15/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/winnow-1.0.1/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/winnow-1.0.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/writeable-0.6.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/yoke-0.8.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/yoke-derive-0.8.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zerocopy-0.8.48/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zerofrom-0.1.7/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zerofrom-derive-0.1.7/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zeroize-1.8.2/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zerotrie-0.2.4/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zerovec-0.11.6/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zerovec-derive-0.11.3/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zlib-rs-0.6.3/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rand GHSA-cq8v-f236-94qc 低危 0.8.5 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13

opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/zmij-1.0.21/Cargo.lock (cargo)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
opt/offline-cache/go/bin/gofumpt (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/mod CVE-2026-56864 未知 v0.38.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

golang.org/x/mod CVE-2026-56865 未知 v0.38.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

opt/offline-cache/go/bin/goimports (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/mod CVE-2026-56864 未知 v0.39.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

golang.org/x/mod CVE-2026-56865 未知 v0.39.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

opt/offline-cache/go/bin/golangci-lint (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/text CVE-2026-56852 高危 v0.22.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27

github.com/go-viper/mapstructure/v2 GHSA-fv92-fjc5-jj9h 中危 v2.2.1 2.3.0 mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data

漏洞详情: https://github.com/advisories/GHSA-fv92-fjc5-jj9h

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2025-06-27 16:24 修改: 2025-06-27 16:24

github.com/go-viper/mapstructure/v2 CVE-2025-11065 中危 v2.2.1 2.4.0 github.com/go-viper/mapstructure/v2: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11065

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-01-26 20:16 修改: 2026-06-30 00:16

golang.org/x/mod CVE-2026-56865 未知 v0.24.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

golang.org/x/sys CVE-2026-39824 未知 v0.31.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

golang.org/x/mod CVE-2026-56864 未知 v0.24.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

opt/offline-cache/go/bin/staticcheck (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/mod CVE-2026-56864 未知 v0.31.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

golang.org/x/mod CVE-2026-56865 未知 v0.31.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:453c7d1d7934f6543127ff64b95fe47fb0d5770d352d95d2febbbc8b849b0784

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

root/.cache/act/actions-setup-dotnet@v3/__tests__/e2e-test-csproj/packages.lock.json (nuget)
低危漏洞:0 中危漏洞:0 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Newtonsoft.Json CVE-2024-21907 高危 9.0.1 13.0.1 Improper Handling of Exceptional Conditions in Newtonsoft.Json

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21907

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-01-03 16:15 修改: 2026-07-14 23:17

System.Net.Http CVE-2018-8292 高危 4.3.0 4.3.4 Core: information disclosure due to authentication information exposed in a redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8292

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2018-10-10 13:29 修改: 2026-06-17 02:04

System.Text.RegularExpressions CVE-2019-0820 高危 4.3.0 4.3.1 dotnet: timeouts for regular expressions are not enforced

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0820

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2019-05-16 19:29 修改: 2026-06-17 02:08

root/.cache/act/actions-setup-dotnet@v4/__tests__/e2e-test-csproj/packages.lock.json (nuget)
低危漏洞:0 中危漏洞:0 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Newtonsoft.Json CVE-2024-21907 高危 9.0.1 13.0.1 Improper Handling of Exceptional Conditions in Newtonsoft.Json

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21907

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-01-03 16:15 修改: 2026-07-14 23:17

System.Net.Http CVE-2018-8292 高危 4.3.0 4.3.4 Core: information disclosure due to authentication information exposed in a redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8292

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2018-10-10 13:29 修改: 2026-06-17 02:04

System.Text.RegularExpressions CVE-2019-0820 高危 4.3.0 4.3.1 dotnet: timeouts for regular expressions are not enforced

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0820

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2019-05-16 19:29 修改: 2026-06-17 02:08

root/.cache/act/actions-setup-dotnet@v5/__tests__/e2e-test-csproj/packages.lock.json (nuget)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
root/.cache/act/swatinem-rust-cache@v2/tests/Cargo.lock (cargo)
低危漏洞:4 中危漏洞:12 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
mio CVE-2024-27308 高危 0.8.4 0.8.11 CVE-2024-27308 affecting package rpm-ostree for versions less than 2024.4-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27308

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-03-06 20:15 修改: 2026-06-17 07:19

openssl CVE-2026-41676 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.41 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

openssl GHSA-6hcf-g6gr-hhcr 高危 0.10.41 0.10.48 `openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

漏洞详情: https://github.com/advisories/GHSA-6hcf-g6gr-hhcr

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-03-24 22:01 修改: 2023-03-24 22:01

openssl GHSA-9qwg-crg9-m2vc 高危 0.10.41 0.10.48 `openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read

漏洞详情: https://github.com/advisories/GHSA-9qwg-crg9-m2vc

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-03-24 22:01 修改: 2023-03-24 22:01

bumpalo GHSA-f85w-wvc7-crwc 中危 3.11.0 3.11.1 bumpalo has use-after-free due to a lifetime error in `Vec::into_iter()`

漏洞详情: https://github.com/advisories/GHSA-f85w-wvc7-crwc

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-01-20 21:54 修改: 2023-01-20 21:54

bytes CVE-2026-25541 中危 1.2.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

h2 GHSA-q6cp-qfwq-4gcv 中危 0.4.3 0.3.26, 0.4.4 h2 servers vulnerable to degradation of service with CONTINUATION Flood

漏洞详情: https://github.com/advisories/GHSA-q6cp-qfwq-4gcv

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-04-05 15:05 修改: 2024-04-05 15:05

idna CVE-2024-12224 中危 0.2.3 1.0.0 idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12224

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-05-30 02:15 修改: 2026-06-17 06:59

openssl CVE-2023-53159 中危 0.10.41 0.10.55 openssl: OpenSSL: Out-of-bounds Read Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53159

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-07-28 03:15 修改: 2026-06-17 06:44

openssl CVE-2025-24898 中危 0.10.41 0.10.70 rust-openssl: rust openssl ssl::select_next_proto use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24898

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-02-03 18:15 修改: 2026-06-17 08:59

openssl CVE-2026-44662 中危 0.10.41 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

openssl GHSA-3gxf-9r58-2ghg 中危 0.10.41 0.10.48 `openssl` `X509NameBuilder::build` returned object is not thread safe

漏洞详情: https://github.com/advisories/GHSA-3gxf-9r58-2ghg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-03-24 22:01 修改: 2023-03-24 22:01

openssl GHSA-4fcv-w3qc-ppgg 中危 0.10.41 0.10.72 rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`

漏洞详情: https://github.com/advisories/GHSA-4fcv-w3qc-ppgg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-04-04 20:31 修改: 2025-04-04 20:31

openssl GHSA-q445-7m23-qrmw 中危 0.10.41 0.10.66 openssl's `MemBio::get_buf` has undefined behavior with empty buffers

漏洞详情: https://github.com/advisories/GHSA-q445-7m23-qrmw

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-07-22 17:34 修改: 2024-07-22 17:34

openssl GHSA-xphf-cx8h-7q9g 中危 0.10.41 0.10.60 `openssl` `X509StoreRef::objects` is unsound

漏洞详情: https://github.com/advisories/GHSA-xphf-cx8h-7q9g

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-11-28 20:51 修改: 2023-11-28 20:51

tokio CVE-2023-22466 中危 1.21.0 1.18.4, 1.20.3, 1.23.1 Tokio is a runtime for writing applications with Rust. Starting with v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22466

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-01-04 22:15 修改: 2026-06-17 05:35

remove_dir_all GHSA-mc8h-8q98-g5hr 低危 0.5.3 0.8.0 Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all

漏洞详情: https://github.com/advisories/GHSA-mc8h-8q98-g5hr

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-02-24 16:23 修改: 2023-02-24 16:23

openssl CVE-2026-41677 低危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

tokio GHSA-4q83-7cq4-p6wg 低危 1.21.0 1.24.2, 1.20.4, 1.18.5 `tokio::io::ReadHalf<T>::unsplit` is Unsound

漏洞详情: https://github.com/advisories/GHSA-4q83-7cq4-p6wg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-02-04 00:30 修改: 2023-02-04 00:30

tokio GHSA-rr8g-9fpq-6wmg 低危 1.21.0 1.44.2, 1.38.2, 1.43.1 Tokio broadcast channel calls clone in parallel, but does not require `Sync`

漏洞详情: https://github.com/advisories/GHSA-rr8g-9fpq-6wmg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-04-07 21:12 修改: 2025-04-07 21:12

root/.cache/act/swatinem-rust-cache@v2/tests/wasm-workspace/Cargo.lock (cargo)
低危漏洞:5 中危漏洞:14 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
mio CVE-2024-27308 高危 0.8.4 0.8.11 CVE-2024-27308 affecting package rpm-ostree for versions less than 2024.4-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27308

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-03-06 20:15 修改: 2026-06-17 07:19

openssl CVE-2026-41676 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41676

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-41678 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41678

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-17 19:24

openssl CVE-2026-41681 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41681

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:51

openssl CVE-2026-41898 高危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41898

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-07-15 16:17

openssl CVE-2026-42327 高危 0.10.41 0.10.79 rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42327

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:47

openssl GHSA-6hcf-g6gr-hhcr 高危 0.10.41 0.10.48 `openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

漏洞详情: https://github.com/advisories/GHSA-6hcf-g6gr-hhcr

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-03-24 22:01 修改: 2023-03-24 22:01

openssl GHSA-9qwg-crg9-m2vc 高危 0.10.41 0.10.48 `openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read

漏洞详情: https://github.com/advisories/GHSA-9qwg-crg9-m2vc

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-03-24 22:01 修改: 2023-03-24 22:01

h2 CVE-2023-26964 中危 0.3.14 0.3.17 An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26964

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-04-11 14:15 修改: 2026-06-17 05:44

h2 GHSA-8r5v-vm4m-4g25 中危 0.3.14 0.3.24, 0.4.2 Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)

漏洞详情: https://github.com/advisories/GHSA-8r5v-vm4m-4g25

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-01-19 15:24 修改: 2024-01-19 15:24

h2 GHSA-q6cp-qfwq-4gcv 中危 0.3.14 0.3.26, 0.4.4 h2 servers vulnerable to degradation of service with CONTINUATION Flood

漏洞详情: https://github.com/advisories/GHSA-q6cp-qfwq-4gcv

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-04-05 15:05 修改: 2024-04-05 15:05

idna CVE-2024-12224 中危 0.2.3 1.0.0 idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12224

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-05-30 02:15 修改: 2026-06-17 06:59

bumpalo GHSA-f85w-wvc7-crwc 中危 3.11.0 3.11.1 bumpalo has use-after-free due to a lifetime error in `Vec::into_iter()`

漏洞详情: https://github.com/advisories/GHSA-f85w-wvc7-crwc

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-01-20 21:54 修改: 2023-01-20 21:54

bytes CVE-2026-25541 中危 1.2.1 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24

openssl CVE-2023-53159 中危 0.10.41 0.10.55 openssl: OpenSSL: Out-of-bounds Read Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-53159

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-07-28 03:15 修改: 2026-06-17 06:44

openssl CVE-2025-24898 中危 0.10.41 0.10.70 rust-openssl: rust openssl ssl::select_next_proto use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24898

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-02-03 18:15 修改: 2026-06-17 08:59

openssl CVE-2026-44662 中危 0.10.41 0.10.79 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44662

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-05-14 21:16 修改: 2026-06-17 10:51

openssl GHSA-3gxf-9r58-2ghg 中危 0.10.41 0.10.48 `openssl` `X509NameBuilder::build` returned object is not thread safe

漏洞详情: https://github.com/advisories/GHSA-3gxf-9r58-2ghg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-03-24 22:01 修改: 2023-03-24 22:01

openssl GHSA-4fcv-w3qc-ppgg 中危 0.10.41 0.10.72 rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`

漏洞详情: https://github.com/advisories/GHSA-4fcv-w3qc-ppgg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-04-04 20:31 修改: 2025-04-04 20:31

openssl GHSA-q445-7m23-qrmw 中危 0.10.41 0.10.66 openssl's `MemBio::get_buf` has undefined behavior with empty buffers

漏洞详情: https://github.com/advisories/GHSA-q445-7m23-qrmw

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2024-07-22 17:34 修改: 2024-07-22 17:34

openssl GHSA-xphf-cx8h-7q9g 中危 0.10.41 0.10.60 `openssl` `X509StoreRef::objects` is unsound

漏洞详情: https://github.com/advisories/GHSA-xphf-cx8h-7q9g

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-11-28 20:51 修改: 2023-11-28 20:51

tokio CVE-2023-22466 中危 1.21.0 1.18.4, 1.20.3, 1.23.1 Tokio is a runtime for writing applications with Rust. Starting with v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22466

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-01-04 22:15 修改: 2026-06-17 05:35

openssl CVE-2026-41677 低危 0.10.41 0.10.78 rust-openssl provides OpenSSL bindings for the Rust programming langua ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41677

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:46

remove_dir_all GHSA-mc8h-8q98-g5hr 低危 0.5.3 0.8.0 Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all

漏洞详情: https://github.com/advisories/GHSA-mc8h-8q98-g5hr

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-02-24 16:23 修改: 2023-02-24 16:23

atty GHSA-g98v-hv3f-hcfr 低危 0.2.14 atty potential unaligned read

漏洞详情: https://github.com/advisories/GHSA-g98v-hv3f-hcfr

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-06-30 20:21 修改: 2024-02-14 17:42

tokio GHSA-4q83-7cq4-p6wg 低危 1.21.0 1.24.2, 1.20.4, 1.18.5 `tokio::io::ReadHalf<T>::unsplit` is Unsound

漏洞详情: https://github.com/advisories/GHSA-4q83-7cq4-p6wg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2023-02-04 00:30 修改: 2023-02-04 00:30

tokio GHSA-rr8g-9fpq-6wmg 低危 1.21.0 1.44.2, 1.38.2, 1.43.1 Tokio broadcast channel calls clone in parallel, but does not require `Sync`

漏洞详情: https://github.com/advisories/GHSA-rr8g-9fpq-6wmg

镜像层: sha256:7e18dbed847b92f9069ee9d857cac46a22328e23164f6c5e95c3be89bd1d125f

发布日期: 2025-04-07 21:12 修改: 2025-04-07 21:12

usr/local/bin/gitea-runner (gobinary)
低危漏洞:0 中危漏洞:1 高危漏洞:9 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/go-git/go-git/v5 CVE-2026-71556 高危 v5.19.1 5.19.2 github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17

stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

github.com/go-git/go-git/v5 CVE-2026-71557 中危 v5.19.1 5.19.2 go-git is an extensible git implementation library written in pure Go. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17

golang.org/x/crypto GO-2026-5932 未知 v0.54.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:f73c7482af87451083bc6a9042aa573d926620f664de3bc59fe3cbf44f298adc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/lib/docker/cli-plugins/docker-buildx (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:11 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/docker/docker CVE-2026-34040 高危 v28.5.2+incompatible 29.3.1 Moby: Moby: Authorization bypass vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38

github.com/docker/docker CVE-2026-41567 高危 v28.5.2+incompatible docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-06-05 02:17 修改: 2026-08-17 12:18

github.com/docker/docker CVE-2026-42306 高危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47

stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18

stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

github.com/docker/docker CVE-2026-33997 中危 v28.5.2+incompatible 29.3.1 moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-03-31 03:15 修改: 2026-08-17 12:18

github.com/docker/docker CVE-2026-41568 中危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46

golang.org/x/mod CVE-2026-56865 未知 v0.38.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

golang.org/x/crypto GO-2026-5932 未知 v0.54.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

golang.org/x/mod CVE-2026-56864 未知 v0.38.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

usr/local/lib/docker/cli-plugins/docker-compose (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/docker/docker CVE-2026-34040 高危 v28.5.2+incompatible 29.3.1 Moby: Moby: Authorization bypass vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38

github.com/docker/docker CVE-2026-41567 高危 v28.5.2+incompatible docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-06-05 02:17 修改: 2026-08-17 12:18

github.com/docker/docker CVE-2026-42306 高危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47

github.com/docker/docker CVE-2026-33997 中危 v28.5.2+incompatible 29.3.1 moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-03-31 03:15 修改: 2026-08-17 12:18

github.com/docker/docker CVE-2026-41568 中危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46

golang.org/x/crypto GO-2026-5932 未知 v0.54.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

golang.org/x/mod CVE-2026-56864 未知 v0.38.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19

golang.org/x/mod CVE-2026-56865 未知 v0.38.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:18c2536aa3acee03e541310a9a73b0bdf813e35293fac0857169cee7c79c07a1

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

/opt/mise/installs/go/1.22.12/src/crypto/x509/platform_root_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/mise/installs/go/1.23.12/src/crypto/x509/platform_root_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/mise/installs/go/1.24.13/src/crypto/x509/platform_root_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/mise/installs/go/1.25.13/src/crypto/x509/platform_root_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/ed25519-compact-2.2.0/src/pem.rs ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/libnghttp2-sys-0.1.13+1.68.1/nghttp2/src/ca.nghttp2.org-key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/offline-cache/cargo/registry/src/index.crates.io-1949cf8c6b5b557f/pasetors-0.7.8/src/footer.rs ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/offline-cache/go/pkg/mod/github.com/securego/gosec/v2@v2.22.2/rules/hardcoded_credentials.go ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/offline-cache/go/pkg/mod/github.com/spf13/afero@v1.12.0/gcsfs/gcs-fake-service-account.json ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/offline-cache/npm/_cacache/content-v2/sha512/5d/34/4bf4a4989f7dc38a52370a792e32ba15ab548dde1d973304f40feef70e598d17a19e549996e149bfdf36d939b6247fe03d47e839859c6c8335b5836694a6 ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/root/.cache/act/hashicorp-setup-terraform@v3/.github/workflows/setup-terraform.yml ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×