mcr.microsoft.com/playwright/python:v1.62.0-resolute-arm64 linux/arm64

mcr.microsoft.com/playwright/python:v1.62.0-resolute-arm64 - Trivy安全扫描结果扫描时间: 2026-08-24 10:09 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:34

中危漏洞:242

高危漏洞:16

严重漏洞:0

系统OS: ubuntu 26.04 扫描引擎: Trivy 扫描时间: 2026-08-24 10:09

mcr.microsoft.com/playwright/python:v1.62.0-resolute-arm64 (ubuntu 26.04) (ubuntu)

低危漏洞:34

中危漏洞:235

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
bsdutils	CVE-2026-27456	中危	1:2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils	CVE-2026-3184	中危	1:2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
curl	CVE-2026-11856	中危	8.18.0-1ubuntu2.3	8.18.0-1ubuntu2.4	curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
git	CVE-2024-52005	中危	1:2.53.0-1ubuntu1		git: The sideband payload is passed unfiltered to the terminal in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git-man	CVE-2024-52005	中危	1:2.53.0-1ubuntu1		git: The sideband payload is passed unfiltered to the terminal in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
glib-networking	CVE-2026-10028	中危	2.80.1-1build2		glib-networking: Infinite loop in glib-networking GnuTLS backend allows remote denial of service via circular certificate chain 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10028 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-05-28 23:16 修改: 2026-07-21 10:10
glib-networking-common	CVE-2026-10028	中危	2.80.1-1build2		glib-networking: Infinite loop in glib-networking GnuTLS backend allows remote denial of service via circular certificate chain 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10028 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-05-28 23:16 修改: 2026-07-21 10:10
glib-networking-services	CVE-2026-10028	中危	2.80.1-1build2		glib-networking: Infinite loop in glib-networking GnuTLS backend allows remote denial of service via circular certificate chain 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10028 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-05-28 23:16 修改: 2026-07-21 10:10
libavahi-client3	CVE-2025-59529	中危	0.8-18ubuntu1.1		avahi: simple clients denial-of-service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
libavahi-common-data	CVE-2025-59529	中危	0.8-18ubuntu1.1		avahi: simple clients denial-of-service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
libavahi-common3	CVE-2025-59529	中危	0.8-18ubuntu1.1		avahi: simple clients denial-of-service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
libavcodec62	CVE-2023-6601	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6601 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavcodec62	CVE-2023-6602	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows po ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6602 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavcodec62	CVE-2023-6603	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6603 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavcodec62	CVE-2023-6604	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg. This vulnerability allows unexpected addit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6604 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavcodec62	CVE-2023-6605	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's DASH playlist support. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6605 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavcodec62	CVE-2025-22921	中危	7:8.0.1-3ubuntu2		FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a seg ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22921 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:50
libavcodec62	CVE-2025-25467	中危	7:8.0.1-3ubuntu2		Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
libavcodec62	CVE-2025-25473	中危	7:8.0.1-3ubuntu2		FFmpeg git master before commit c08d30 was discovered to contain a mem ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25473 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:00
libavcodec62	CVE-2025-9951	中危	7:8.0.1-3ubuntu2		A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9951 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-09 14:15 修改: 2026-06-17 10:10
libavcodec62	CVE-2026-40962	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40962 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-16 02:16 修改: 2026-06-17 10:45
libavcodec62	CVE-2026-66036	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66036 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 01:05
libavcodec62	CVE-2026-66037	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66037 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:58
libavcodec62	CVE-2026-66038	中危	7:8.0.1-3ubuntu2		FFmpeg: Information disclosure via malformed zlib video stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66038 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:54
libavcodec62	CVE-2026-66039	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66039 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:46
libavcodec62	CVE-2026-66041	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66041 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:32
libavfilter11	CVE-2023-6601	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6601 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavfilter11	CVE-2023-6602	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows po ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6602 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavfilter11	CVE-2023-6603	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6603 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavfilter11	CVE-2023-6604	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg. This vulnerability allows unexpected addit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6604 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavfilter11	CVE-2023-6605	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's DASH playlist support. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6605 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavfilter11	CVE-2025-22921	中危	7:8.0.1-3ubuntu2		FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a seg ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22921 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:50
libavfilter11	CVE-2025-25467	中危	7:8.0.1-3ubuntu2		Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
libavfilter11	CVE-2025-25473	中危	7:8.0.1-3ubuntu2		FFmpeg git master before commit c08d30 was discovered to contain a mem ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25473 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:00
libavfilter11	CVE-2025-9951	中危	7:8.0.1-3ubuntu2		A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9951 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-09 14:15 修改: 2026-06-17 10:10
libavfilter11	CVE-2026-40962	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40962 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-16 02:16 修改: 2026-06-17 10:45
libavfilter11	CVE-2026-66036	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66036 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 01:05
libavfilter11	CVE-2026-66037	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66037 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:58
libavfilter11	CVE-2026-66038	中危	7:8.0.1-3ubuntu2		FFmpeg: Information disclosure via malformed zlib video stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66038 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:54
libavfilter11	CVE-2026-66039	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66039 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:46
libavfilter11	CVE-2026-66041	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66041 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:32
libavformat62	CVE-2023-6601	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6601 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavformat62	CVE-2023-6602	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows po ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6602 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavformat62	CVE-2023-6603	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6603 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavformat62	CVE-2023-6604	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg. This vulnerability allows unexpected addit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6604 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavformat62	CVE-2023-6605	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's DASH playlist support. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6605 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavformat62	CVE-2025-22921	中危	7:8.0.1-3ubuntu2		FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a seg ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22921 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:50
libavformat62	CVE-2025-25467	中危	7:8.0.1-3ubuntu2		Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
libavformat62	CVE-2025-25473	中危	7:8.0.1-3ubuntu2		FFmpeg git master before commit c08d30 was discovered to contain a mem ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25473 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:00
libavformat62	CVE-2025-9951	中危	7:8.0.1-3ubuntu2		A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9951 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-09 14:15 修改: 2026-06-17 10:10
libavformat62	CVE-2026-40962	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40962 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-16 02:16 修改: 2026-06-17 10:45
libavformat62	CVE-2026-66036	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66036 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 01:05
libavformat62	CVE-2026-66037	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66037 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:58
libavformat62	CVE-2026-66038	中危	7:8.0.1-3ubuntu2		FFmpeg: Information disclosure via malformed zlib video stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66038 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:54
libavformat62	CVE-2026-66039	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66039 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:46
libavformat62	CVE-2026-66041	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66041 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:32
libavutil60	CVE-2023-6601	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6601 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavutil60	CVE-2023-6602	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows po ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6602 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavutil60	CVE-2023-6603	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6603 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libavutil60	CVE-2023-6604	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg. This vulnerability allows unexpected addit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6604 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavutil60	CVE-2023-6605	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's DASH playlist support. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6605 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libavutil60	CVE-2025-22921	中危	7:8.0.1-3ubuntu2		FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a seg ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22921 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:50
libavutil60	CVE-2025-25467	中危	7:8.0.1-3ubuntu2		Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
libavutil60	CVE-2025-25473	中危	7:8.0.1-3ubuntu2		FFmpeg git master before commit c08d30 was discovered to contain a mem ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25473 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:00
libavutil60	CVE-2025-9951	中危	7:8.0.1-3ubuntu2		A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9951 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-09 14:15 修改: 2026-06-17 10:10
libavutil60	CVE-2026-40962	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40962 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-16 02:16 修改: 2026-06-17 10:45
libavutil60	CVE-2026-66036	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66036 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 01:05
libavutil60	CVE-2026-66037	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66037 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:58
libavutil60	CVE-2026-66038	中危	7:8.0.1-3ubuntu2		FFmpeg: Information disclosure via malformed zlib video stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66038 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:54
libavutil60	CVE-2026-66039	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66039 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:46
libavutil60	CVE-2026-66041	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66041 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:32
libblkid1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libc-bin	CVE-2026-4046	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin	CVE-2026-5435	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5450	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5928	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-6238	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-4046	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-gconv-modules-extra	CVE-2026-5435	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-5450	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-5928	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-6238	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2026-4046	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc6	CVE-2026-5435	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libcurl3t64-gnutls	CVE-2026-11856	中危	8.18.0-1ubuntu2.3	8.18.0-1ubuntu2.4	curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64	CVE-2026-11856	中危	8.18.0-1ubuntu2.3	8.18.0-1ubuntu2.4	curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libde265-0	CVE-2024-38949	中危	1.0.16-1build1		Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38949 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-06-26 20:15 修改: 2026-06-17 07:41
libde265-0	CVE-2024-38950	中危	1.0.16-1build1		Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38950 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-06-26 20:15 修改: 2026-06-17 07:41
libde265-0	CVE-2026-33164	中危	1.0.16-1build1		libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33164 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-20 21:17 修改: 2026-06-17 10:37
libde265-0	CVE-2026-33165	中危	1.0.16-1build1		libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33165 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-20 21:17 修改: 2026-06-17 10:37
libde265-0	CVE-2026-45382	中危	1.0.16-1build1		libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45382 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-21 21:16 修改: 2026-07-23 18:18
libde265-0	CVE-2026-45383	中危	1.0.16-1build1		libde265 is an open source implementation of the h.265 video codec. Ve ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45383 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-21 21:16 修改: 2026-07-23 18:18
libde265-0	CVE-2026-49295	中危	1.0.16-1build1		libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49295 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-06-19 21:17 修改: 2026-06-26 19:17
libde265-0	CVE-2026-49337	中危	1.0.16-1build1		libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49337 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-06-19 21:17 修改: 2026-06-23 15:44
libde265-0	CVE-2026-49346	中危	1.0.16-1build1		libde265 is an open source implementation of the h.265 video codec. Pr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49346 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-06-19 21:17 修改: 2026-06-26 19:17
libde265-0	CVE-2026-54240	中危	1.0.16-1build1		Title Not Available 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54240 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libde265-0	CVE-2026-54241	中危	1.0.16-1build1		Amazon Linux 2023 - ALAS2023-2026-1974: Important priority package update for libde265 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54241 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libduktape207	CVE-2026-12216	中危	2.7.0+tests-0ubuntu4		Duktape: svaarala duktape duk_api_bytecode.c memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12216 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-06-15 04:16 修改: 2026-07-24 12:10
libexpat1	CVE-2025-66382	中危	2.7.4-1		libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libheif-plugin-aomdec	CVE-2026-62289	中危	1.21.2-3ubuntu0.3	1.21.2-3ubuntu0.4	libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-62289 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-18 22:17 修改: 2026-08-19 17:19
libheif-plugin-aomdec	CVE-2026-62292	中危	1.21.2-3ubuntu0.3	1.21.2-3ubuntu0.4	libheif is a HEIF and AVIF file format decoder and encoder. From 1.19. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-62292 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-18 22:17 修改: 2026-08-18 22:17
libheif1	CVE-2026-62289	中危	1.21.2-3ubuntu0.3	1.21.2-3ubuntu0.4	libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-62289 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-18 22:17 修改: 2026-08-19 17:19
libheif1	CVE-2026-62292	中危	1.21.2-3ubuntu0.3	1.21.2-3ubuntu0.4	libheif is a HEIF and AVIF file format decoder and encoder. From 1.19. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-62292 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-18 22:17 修改: 2026-08-18 22:17
libmbedcrypto16	CVE-2025-49087	中危	3.6.5-0.1ubuntu2		In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49087 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-07-20 19:15 修改: 2026-06-17 09:30
libmbedcrypto16	CVE-2025-49600	中危	3.6.5-0.1ubuntu2		In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid s ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49600 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-07-04 15:15 修改: 2026-06-17 09:31
libmbedcrypto16	CVE-2025-49601	中危	3.6.5-0.1ubuntu2		In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49601 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-07-04 15:15 修改: 2026-06-17 09:31
libmbedcrypto16	CVE-2025-66442	中危	3.6.5-0.1ubuntu2		mbedtls: Mbed TLS and TF-PSA-Crypto: Information disclosure via compiler-induced timing side channel 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66442 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-01 20:16 修改: 2026-06-17 09:56
libmount1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libonnx1t64	CVE-2025-51480	中危	1.20.0-1		CVE-2025-51480 affecting package pytorch for versions less than 2.2.2-15 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-51480 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-07-22 16:15 修改: 2026-06-17 09:35
libonnx1t64	CVE-2026-27489	中危	1.20.0-1		onnx: ONNX: Information Disclosure via Path Traversal Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27489 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-01 18:16 修改: 2026-07-15 02:19
libonnx1t64	CVE-2026-28500	中危	1.20.0-1		onnx: ONNX: Untrusted Model Repository Warnings Suppressed 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28500 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-18 02:16 修改: 2026-07-15 02:19
libonnx1t64	CVE-2026-34445	中危	1.20.0-1		ONNX: ONNX: Denial of Service and potential information disclosure via malicious model metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34445 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-01 18:16 修改: 2026-06-17 10:39
libonnx1t64	CVE-2026-34446	中危	1.20.0-1		onnx: ONNX: Information disclosure through hardlink path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34446 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-01 18:16 修改: 2026-06-17 10:39
libonnx1t64	CVE-2026-34447	中危	1.20.0-1		Open Neural Network Exchange (ONNX) is an open standard for machine le ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34447 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-01 18:16 修改: 2026-06-17 10:39
libopenexr-3-1-30	CVE-2025-12495	中危	3.1.13-2build1		OpenEXR: OpenEXR: Remote Code Execution via malicious EXR file parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12495 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-12-23 22:15 修改: 2026-06-17 08:32
libopenexr-3-1-30	CVE-2025-12839	中危	3.1.13-2build1		OpenEXR: OpenEXR: Remote Code Execution via Heap-based Buffer Overflow in EXR File Parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12839 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-12-23 22:15 修改: 2026-06-17 08:33
libopenexr-3-1-30	CVE-2025-12840	中危	3.1.13-2build1		OpenEXR: OpenEXR: Remote Code Execution via EXR file parsing heap-based buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12840 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-12-23 22:15 修改: 2026-06-17 08:33
libopenexr-3-1-30	CVE-2025-48072	中危	3.1.13-2build1		openexr: OpenEXR Out of Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48072 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-07-31 21:15 修改: 2026-06-17 09:29
libopenexr-3-1-30	CVE-2026-27622	中危	3.1.13-2build1		openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27622 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-03 23:15 修改: 2026-07-15 02:19
libopenexr-3-1-30	CVE-2026-34380	中危	3.1.13-2build1		OpenEXR: OpenEXR: Denial of Service due to signed integer overflow in image decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34380 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:38
libopenexr-3-1-30	CVE-2026-34588	中危	3.1.13-2build1		OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34588 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-06 16:16 修改: 2026-07-15 02:20
libopenjp2-7	CVE-2023-39328	中危	2.5.4-1ubuntu0.1		openjpeg: denail of service via crafted image file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39328 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-07-09 14:15 修改: 2026-06-26 10:16
libopenjp2-7	CVE-2023-39329	中危	2.5.4-1ubuntu0.1		openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39329 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-07-13 03:15 修改: 2026-06-17 06:12
libp11-kit0	CVE-2026-13757	中危	0.26.2-2		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2026-06-29 19:16 修改: 2026-08-21 13:16
libpam-modules	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-modules-bin	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-runtime	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-systemd	CVE-2026-15059	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libpam-systemd	CVE-2026-15060	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	When systemd-machined >= v259 (or v258 with a custom `polkit` policy t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libpam-systemd	CVE-2026-16742	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libpam0g	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpixman-1-0	CVE-2023-37769	中危	0.46.4-1		stress-test master commit e4c878 was discovered to contain a FPE vulne ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2023-07-17 20:15 修改: 2026-06-17 06:08
libprotobuf32t64	CVE-2026-6409	中危	3.21.12-15ubuntu1		A Denial of Service (DoS) vulnerability exists in the Protobuf PHP lib ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6409 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-16 15:17 修改: 2026-06-17 11:00
libsmartcols1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libsndfile1	CVE-2025-52194	中危	1.2.2-4		libsndfile: buffer overflow when processing crafted IRCAM audio files 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52194 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-08-21 15:15 修改: 2026-06-17 09:36
libsndfile1	CVE-2026-37555	中危	1.2.2-4		libsndfile: integer overflow in ima_reader_init() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37555 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:20
libsoup-3.0-0	CVE-2025-32049	中危	3.6.6-1		libsoup: Denial of Service attack to websocket server 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32049 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-04-03 14:15 修改: 2026-06-30 01:16
libsoup-3.0-0	CVE-2025-4035	中危	3.6.6-1		libsoup: Cookie domain validation bypass via uppercase characters in libsoup 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4035 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-04-29 13:15 修改: 2026-06-30 15:16
libsoup-3.0-0	CVE-2026-0716	中危	3.6.6-1		libsoup: Out-of-Bounds Read in libsoup WebSocket Frame Processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0716 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-01-13 23:16 修改: 2026-06-17 10:11
libsoup-3.0-0	CVE-2026-0719	中危	3.6.6-1		libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0719 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-01-08 13:15 修改: 2026-07-15 02:17
libsoup-3.0-0	CVE-2026-3632	中危	3.6.6-1		libsoup: libsoup: HTTP Smuggling and Server-Side Request Forgery via Malformed Hostnames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3632 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
libsoup-3.0-0	CVE-2026-3633	中危	3.6.6-1		libsoup: libsoup: Header and HTTP request injection via CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3633 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
libsoup-3.0-0	CVE-2026-3634	中危	3.6.6-1		libsoup: libsoup: HTTP header injection and response splitting via CRLF injection in Content-Type header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3634 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
libsoup-3.0-common	CVE-2025-32049	中危	3.6.6-1		libsoup: Denial of Service attack to websocket server 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32049 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-04-03 14:15 修改: 2026-06-30 01:16
libsoup-3.0-common	CVE-2025-4035	中危	3.6.6-1		libsoup: Cookie domain validation bypass via uppercase characters in libsoup 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4035 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-04-29 13:15 修改: 2026-06-30 15:16
libsoup-3.0-common	CVE-2026-0716	中危	3.6.6-1		libsoup: Out-of-Bounds Read in libsoup WebSocket Frame Processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0716 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-01-13 23:16 修改: 2026-06-17 10:11
libsoup-3.0-common	CVE-2026-0719	中危	3.6.6-1		libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0719 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-01-08 13:15 修改: 2026-07-15 02:17
libsoup-3.0-common	CVE-2026-3632	中危	3.6.6-1		libsoup: libsoup: HTTP Smuggling and Server-Side Request Forgery via Malformed Hostnames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3632 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
libsoup-3.0-common	CVE-2026-3633	中危	3.6.6-1		libsoup: libsoup: Header and HTTP request injection via CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3633 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
libsoup-3.0-common	CVE-2026-3634	中危	3.6.6-1		libsoup: libsoup: HTTP header injection and response splitting via CRLF injection in Content-Type header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3634 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
libssh-4	CVE-2026-3731	中危	0.11.3-1ubuntu1	0.11.3-1ubuntu2	libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-08 11:15 修改: 2026-06-17 10:44
libswresample6	CVE-2023-6601	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6601 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libswresample6	CVE-2023-6602	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows po ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6602 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libswresample6	CVE-2023-6603	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6603 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libswresample6	CVE-2023-6604	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg. This vulnerability allows unexpected addit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6604 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libswresample6	CVE-2023-6605	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's DASH playlist support. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6605 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libswresample6	CVE-2025-22921	中危	7:8.0.1-3ubuntu2		FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a seg ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22921 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:50
libswresample6	CVE-2025-25467	中危	7:8.0.1-3ubuntu2		Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
libswresample6	CVE-2025-25473	中危	7:8.0.1-3ubuntu2		FFmpeg git master before commit c08d30 was discovered to contain a mem ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25473 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:00
libswresample6	CVE-2025-9951	中危	7:8.0.1-3ubuntu2		A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9951 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-09 14:15 修改: 2026-06-17 10:10
libswresample6	CVE-2026-40962	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40962 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-16 02:16 修改: 2026-06-17 10:45
libswresample6	CVE-2026-66036	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66036 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 01:05
libswresample6	CVE-2026-66037	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66037 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:58
libswresample6	CVE-2026-66038	中危	7:8.0.1-3ubuntu2		FFmpeg: Information disclosure via malformed zlib video stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66038 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:54
libswresample6	CVE-2026-66039	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66039 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:46
libswresample6	CVE-2026-66041	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66041 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:32
libswscale9	CVE-2023-6601	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6601 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libswscale9	CVE-2023-6602	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows po ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6602 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libswscale9	CVE-2023-6603	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6603 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-12-31 15:15 修改: 2026-06-17 06:51
libswscale9	CVE-2023-6604	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg. This vulnerability allows unexpected addit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6604 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libswscale9	CVE-2023-6605	中危	7:8.0.1-3ubuntu2		A flaw was found in FFmpeg's DASH playlist support. This vulnerability ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6605 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-01-06 17:15 修改: 2026-06-17 06:51
libswscale9	CVE-2025-22921	中危	7:8.0.1-3ubuntu2		FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a seg ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22921 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:50
libswscale9	CVE-2025-25467	中危	7:8.0.1-3ubuntu2		Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
libswscale9	CVE-2025-25473	中危	7:8.0.1-3ubuntu2		FFmpeg git master before commit c08d30 was discovered to contain a mem ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25473 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:00
libswscale9	CVE-2025-9951	中危	7:8.0.1-3ubuntu2		A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9951 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-09 14:15 修改: 2026-06-17 10:10
libswscale9	CVE-2026-40962	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40962 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-16 02:16 修改: 2026-06-17 10:45
libswscale9	CVE-2026-66036	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66036 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 01:05
libswscale9	CVE-2026-66037	中危	7:8.0.1-3ubuntu2		FFmpeg: FFmpeg: Denial of Service via uncontrolled resource consumption in IAMF demuxer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66037 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:58
libswscale9	CVE-2026-66038	中危	7:8.0.1-3ubuntu2		FFmpeg: Information disclosure via malformed zlib video stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66038 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:54
libswscale9	CVE-2026-66039	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66039 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:46
libswscale9	CVE-2026-66041	中危	7:8.0.1-3ubuntu2		ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66041 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-24 20:18 修改: 2026-08-07 00:32
libsystemd-shared	CVE-2026-15059	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd-shared	CVE-2026-15060	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	When systemd-machined >= v259 (or v258 with a custom `polkit` policy t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd-shared	CVE-2026-16742	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libsystemd0	CVE-2026-15059	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd0	CVE-2026-15060	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	When systemd-machined >= v259 (or v258 with a custom `polkit` policy t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd0	CVE-2026-16742	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libudev1	CVE-2026-15059	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libudev1	CVE-2026-15060	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	When systemd-machined >= v259 (or v258 with a custom `polkit` policy t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libudev1	CVE-2026-16742	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libuuid1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libvo-amrwbenc0	CVE-2019-2128	中危	0.1.3-2build2		In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2128 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2019-08-20 20:15 修改: 2026-06-17 02:33
libx264-165	CVE-2025-25467	中危	2:0.165.3222+gitb35605ac-3build1		Insufficient tracking and releasing of allocated used memory in libx26 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25467 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-18 22:15 修改: 2026-06-17 09:00
libxslt1.1	CVE-2025-7425	中危	1.1.45-0.1		libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-07-10 14:15 修改: 2026-08-23 02:16
login	CVE-2026-27456	中危	1:4.16.0-2+really2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login	CVE-2026-3184	中危	1:4.16.0-2+really2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
mount	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
openssh-client	CVE-2026-55655	中危	1:10.2p1-2ubuntu3.5		openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2026-06-23 04:17 修改: 2026-08-21 12:16
rust-coreutils	CVE-2026-35341	中危	0.8.0-0ubuntu3		A vulnerability in uutils coreutils mkfifo allows for the unauthorized ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35341 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35344	中危	0.8.0-0ubuntu3		The dd utility in uutils coreutils suppresses errors during file trunc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35344 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35345	中危	0.8.0-0ubuntu3		A vulnerability in the tail utility of uutils coreutils allows for the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35345 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35348	中危	0.8.0-0ubuntu3		The sort utility in uutils coreutils is vulnerable to a process panic ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35348 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35350	中危	0.8.0-0ubuntu3		The cp utility in uutils coreutils fails to properly handle setuid and ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35350 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35351	中危	0.8.0-0ubuntu3		The mv utility in uutils coreutils fails to preserve file ownership du ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35351 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35352	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35352 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35354	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35354 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35357	中危	0.8.0-0ubuntu3		The cp utility in uutils coreutils is vulnerable to an information dis ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35357 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35359	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35359 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35360	中危	0.8.0-0ubuntu3		The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35360 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35363	中危	0.8.0-0ubuntu3		A vulnerability in the rm utility of uutils coreutils allows the bypas ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35363 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35364	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35364 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35367	中危	0.8.0-0ubuntu3		The nohup utility in uutils coreutils creates its default output file, ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35367 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35368	中危	0.8.0-0ubuntu3		A vulnerability exists in the chroot utility of uutils coreutils when ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35368 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35370	中危	0.8.0-0ubuntu3		The id utility in uutils coreutils miscalculates the groups= section o ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35370 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35371	中危	0.8.0-0ubuntu3		The id utility in uutils coreutils exhibits incorrect behavior in its ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35371 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35373	中危	0.8.0-0ubuntu3		A logic error in the ln utility of uutils coreutils causes the program ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35373 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35374	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35374 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35377	中危	0.8.0-0ubuntu3		A logic error in the env utility of uutils coreutils causes a failure ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35377 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
systemd	CVE-2026-15059	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
systemd	CVE-2026-15060	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	When systemd-machined >= v259 (or v258 with a custom `polkit` policy t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
systemd	CVE-2026-16742	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
systemd-sysv	CVE-2026-15059	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
systemd-sysv	CVE-2026-15060	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	When systemd-machined >= v259 (or v258 with a custom `polkit` policy t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
systemd-sysv	CVE-2026-16742	中危	259.5-0ubuntu3	259.5-0ubuntu3.4	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
tar	CVE-2026-5704	中危	1.35+dfsg-4ubuntu0.2	1.35+dfsg-4ubuntu0.4	tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
util-linux	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libsoup-3.0-0	CVE-2026-3099	低危	3.6.6-1		libsoup: Libsoup: Authentication bypass via digest authentication replay attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3099 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-12 14:16 修改: 2026-06-17 10:43
libpam-systemd	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcairo-script-interpreter2	CVE-2017-7475	低危	1.18.4-3		cairo: NULL pointer dereference with a crafted font file 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
libgcrypt20	CVE-2024-2236	低危	1.12.0-2ubuntu1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
libsystemd-shared	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcairo-script-interpreter2	CVE-2018-18064	低危	1.18.4-3		cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
libopenexr-3-1-30	CVE-2021-45942	低危	3.1.13-2build1		OpenEXR: heap-based buffer overflow in Imf_3_1:LineCompositeTask:execute 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45942 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2022-01-01 01:15 修改: 2026-06-17 04:14
libcairo2	CVE-2017-7475	低危	1.18.4-3		cairo: NULL pointer dereference with a crafted font file 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
libsystemd0	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtiff6	CVE-2025-61143	低危	4.7.0-3ubuntu4	4.7.0-3ubuntu5	libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61143 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50
libtiff6	CVE-2025-61144	低危	4.7.0-3ubuntu4	4.7.0-3ubuntu5	libtiff: libtiff: Denial of Service via buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61144 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50
libcairo2	CVE-2018-18064	低危	1.18.4-3		cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
libsoup-3.0-common	CVE-2025-9901	低危	3.6.6-1		libsoup: Improper Handling of HTTP Vary Header in libsoup Caching 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9901 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-03 13:15 修改: 2026-06-30 03:17
libsoup-3.0-common	CVE-2026-3099	低危	3.6.6-1		libsoup: Libsoup: Authentication bypass via digest authentication replay attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3099 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-03-12 14:16 修改: 2026-06-17 10:43
libudev1	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libopenjp2-7	CVE-2019-6988	低危	2.5.4-1ubuntu0.1		openjpeg: DoS via memory exhaustion in opj_decompress 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6988 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2019-01-28 16:29 修改: 2026-06-17 02:39
libsndfile1	CVE-2024-50613	低危	1.2.2-4		libsndfile: Reachable assertion in mpeg_l3_encoder_close 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50613 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2024-10-27 22:15 修改: 2026-06-17 08:04
libcairo-gobject2	CVE-2017-7475	低危	1.18.4-3		cairo: NULL pointer dereference with a crafted font file 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
libwavpack1	CVE-2021-44269	低危	5.9.0-1		wavpack: Heap out-of-bounds read in WavpackPackSamples() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44269 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2022-03-10 17:44 修改: 2026-06-17 04:12
libicu78	CVE-2025-5222	低危	78.2-2ubuntu1		icu: Stack buffer overflow in the SRBRoot::addTag function 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-05-27 21:15 修改: 2026-08-19 18:16
libde265-0	CVE-2025-61147	低危	1.0.16-1build1		strukturag libde265 commit d9fea9d wa discovered to contain a segmenta ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61147 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-02-23 20:28 修改: 2026-06-17 09:50
libcairo-gobject2	CVE-2018-18064	低危	1.18.4-3		cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
libelf1t64	CVE-2025-1352	低危	0.194-4		elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
systemd	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
login.defs	CVE-2024-56433	低危	1:4.17.4-2ubuntu3		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libelf1t64	CVE-2025-1376	低危	0.194-4		elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
libmbedcrypto16	CVE-2018-1000520	低危	3.6.5-0.1ubuntu2		ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows In ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000520 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2018-06-26 16:29 修改: 2026-06-17 01:32
systemd-sysv	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libsoup-3.0-0	CVE-2025-9901	低危	3.6.6-1		libsoup: Improper Handling of HTTP Vary Header in libsoup Caching 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9901 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-09-03 13:15 修改: 2026-06-30 03:17
openssh-client	CVE-2026-55654	低危	1:10.2p1-2ubuntu3.5		openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654 镜像层: sha256:f782851476333626324822303b865ac7c733dc32634dd41405b127d9ac765b0b 发布日期: 2026-06-23 04:17 修改: 2026-08-21 12:16
passwd	CVE-2024-56433	低危	1:4.17.4-2ubuntu3		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
xserver-common	CVE-2023-5574	低危	2:21.1.22-1ubuntu1		xorg-x11-server: Use-after-free bug in DamageDestroy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5574 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2023-10-25 20:15 修改: 2026-06-23 18:17
xvfb	CVE-2023-5574	低危	2:21.1.22-1ubuntu1		xorg-x11-server: Use-after-free bug in DamageDestroy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5574 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2023-10-25 20:15 修改: 2026-06-23 18:17
zlib1g	CVE-2026-27171	低危	1:1.3.dfsg+really1.3.1-1ubuntu3		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Python (python-pkg)

低危漏洞:0

中危漏洞:1

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
msgpack	GHSA-6v7p-g79w-8964	高危	1.1.2	1.2.1	MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error 漏洞详情: https://github.com/advisories/GHSA-6v7p-g79w-8964 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-06-19 21:42 修改: 2026-06-19 21:42
setuptools	CVE-2025-47273	高危	70.3.0	78.1.1	setuptools: Path Traversal Vulnerability in setuptools PackageIndex 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
setuptools	CVE-2026-59890	中危	70.3.0	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

msgpack

GHSA-6v7p-g79w-8964

高危

1.1.2

1.2.1

MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

漏洞详情: https://github.com/advisories/GHSA-6v7p-g79w-8964

镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8

发布日期: 2026-06-19 21:42 修改: 2026-06-19 21:42

setuptools

CVE-2025-47273

高危

70.3.0

78.1.1

setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27

setuptools

CVE-2026-59890

中危

70.3.0

83.0.0

setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:3c62e1d12f8f69c65f07886e70d70907fd0af19716776d7e30a3d3988d0fcbe8

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

usr/bin/pebble (gobinary)

低危漏洞:0

中危漏洞:6

高危漏洞:14

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-25681	高危	v0.40.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.40.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.40.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-07 20:16 修改: 2026-08-21 13:17
golang.org/x/net	CVE-2026-39821	高危	v0.40.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 16:16 修改: 2026-08-21 13:17
golang.org/x/net	CVE-2026-46600	高危	v0.40.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-33818	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 16:16 修改: 2026-08-21 13:17
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-46600	高危	v1.26.4	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/net	CVE-2026-42506	中危	v0.40.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2025-47911	中危	v0.40.0	0.45.0	golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net	CVE-2025-58190	中危	v0.40.0	0.45.0	golang.org/x/net/html: Infinite parsing loop in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net	CVE-2026-25680	中危	v0.40.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.40.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/sys	CVE-2026-39824	未知	v0.33.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:3fd91e066f3612fd1de500e7a8435ec64d418f1ae5663db38fa5a1fa7927eab9 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10