| aiohttp |
CVE-2026-69244 |
高危 |
3.14.1 |
3.14.3 |
aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
|
| jaraco.context |
CVE-2026-23949 |
高危 |
5.3.0 |
6.1.0 |
jaraco.context: jaraco.context: Path traversal via malicious tar archives
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23949
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-01-20 01:15 修改: 2026-06-17 10:22
|
| pillow |
CVE-2026-54058 |
高危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54058
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 17:17 修改: 2026-08-06 15:46
|
| pillow |
CVE-2026-54059 |
高危 |
12.2.0 |
12.3.0 |
python-pillow: Pillow: Denial of Service via crafted PCF font data
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54059
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
|
| pillow |
CVE-2026-54060 |
高危 |
12.2.0 |
12.3.0 |
python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54060
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
|
| pillow |
CVE-2026-55379 |
高危 |
12.2.0 |
12.3.0 |
python-pillow: Pillow: Denial of Service via crafted BDF font file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55379
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:59
|
| pillow |
CVE-2026-55380 |
高危 |
12.2.0 |
12.3.0 |
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55380
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
|
| pillow |
CVE-2026-59197 |
高危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Native heap out-of-bounds write
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59197
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 17:17 修改: 2026-07-21 19:17
|
| pillow |
CVE-2026-59199 |
高危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Denial of Service via out-of-bounds write in image processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59199
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 16:17 修改: 2026-07-15 16:16
|
| pillow |
CVE-2026-59200 |
高危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Denial of service via crafted PDF stream
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59200
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 17:17 修改: 2026-07-21 15:52
|
| pillow |
CVE-2026-59204 |
高危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Denial of Service via crafted JPEG2000 image
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59204
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 16:17 修改: 2026-07-21 19:17
|
| pillow |
CVE-2026-59205 |
高危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59205
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:09
|
| transformers |
CVE-2026-5241 |
高危 |
5.3.0 |
5.5.0 |
python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5241
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-06-03 14:16 修改: 2026-08-19 12:18
|
| urllib3 |
CVE-2026-44431 |
高危 |
2.6.3 |
2.7.0 |
urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
|
| urllib3 |
CVE-2026-44432 |
高危 |
2.6.3 |
2.7.0 |
urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44432
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-05-13 16:16 修改: 2026-08-19 12:18
|
| wheel |
CVE-2026-24049 |
高危 |
0.45.1 |
0.46.2 |
wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-01-22 05:16 修改: 2026-08-19 12:17
|
| pillow |
CVE-2026-55798 |
中危 |
12.2.0 |
12.3.0 |
python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55798
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
|
| pillow |
CVE-2026-59198 |
中危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59198
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:18
|
| pillow |
CVE-2026-59203 |
中危 |
12.2.0 |
12.3.0 |
Pillow: Pillow: Denial of Service via crafted EPS file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59203
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-14 16:17 修改: 2026-07-15 14:18
|
| pip |
CVE-2025-8869 |
中危 |
24.2 |
25.3 |
pip: pip missing checks on symbolic link extraction
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869
镜像层: sha256:f2f25031527eeb9ff0aff5128127038f32986cae83709bf86abf8b5ab2d8e541
发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
|
| pip |
CVE-2026-3219 |
中危 |
24.2 |
26.1 |
pip: pip: Incorrect file installation due to improper archive handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219
镜像层: sha256:f2f25031527eeb9ff0aff5128127038f32986cae83709bf86abf8b5ab2d8e541
发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
|
| pip |
CVE-2026-6357 |
中危 |
24.2 |
26.1 |
pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357
镜像层: sha256:f2f25031527eeb9ff0aff5128127038f32986cae83709bf86abf8b5ab2d8e541
发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
|
| pip |
CVE-2026-8643 |
中危 |
24.2 |
26.1.2 |
python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643
镜像层: sha256:f2f25031527eeb9ff0aff5128127038f32986cae83709bf86abf8b5ab2d8e541
发布日期: 2026-06-01 17:17 修改: 2026-08-19 12:18
|
| setuptools |
CVE-2026-59890 |
中危 |
80.9.0 |
83.0.0 |
setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
|
| idna |
CVE-2026-45409 |
中危 |
3.11 |
3.15 |
python-idna: idna: Denial of Service via specially crafted long inputs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
|
| aiohttp |
CVE-2026-59881 |
中危 |
3.14.1 |
3.14.2 |
aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
|
| aiohttp |
CVE-2026-69243 |
中危 |
3.14.1 |
3.14.2 |
aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
|
| h2 |
CVE-2026-71554 |
中危 |
4.3.0 |
4.4.1 |
h2 is a pure-Python implementation of a HTTP/2 protocol stack. Version ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71554
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-08-06 22:18 修改: 2026-08-08 03:16
|
| Pygments |
CVE-2026-4539 |
低危 |
2.19.2 |
2.20.0 |
pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4539
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2026-03-22 06:16 修改: 2026-06-17 10:56
|
| torch |
CVE-2025-3000 |
低危 |
2.11.0+cpu |
2.13.0 |
A vulnerability classified as critical has been found in PyTorch 2.6.0 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3000
镜像层: sha256:79577dcd28cf070e838811f67a4fe7c4d05bb3957b65d88c70b227e6107620b9
发布日期: 2025-03-31 15:15 修改: 2026-06-17 09:18
|
| pip |
CVE-2026-1703 |
低危 |
24.2 |
26.0 |
pip: pip: Information disclosure via path traversal when installing crafted wheel archives
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703
镜像层: sha256:f2f25031527eeb9ff0aff5128127038f32986cae83709bf86abf8b5ab2d8e541
发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
|