
OSV.dev · 实时热榜
- 01ECHO-7fdc-16ab-1dd6 · Echo/inetutils
Affected packages: Echo/inetutils Attributes: No fix available
最高第 1 名04:59 达到04:59 首次观测上榜10:19 观测离榜累计约5小时20分 - 02ECHO-b963-92f2-cbc3 · Echo:PyPi/apache-airflow-providers-snowflake
Affected packages: Echo:PyPi/apache-airflow-providers-snowflake Attributes: Fix available
最高第 1 名08:59 达到08:59 首次观测上榜10:19 观测离榜累计约1小时20分 - 03ECHO-bdf0-0082-c899 · Echo/libdbi-perl
Affected packages: Echo/libdbi-perl Attributes: No fix available
最高第 1 名10:51 达到10:51 首次观测上榜16:11 观测离榜累计约5小时20分 - 04MAL-2026-14056 · Malicious code in gunzip-js (npm)
Malicious code in gunzip-js (npm) Affected packages: npm/gunzip-js Attributes: No fix available
最高第 1 名00:00 达到当日首次采集时已在榜04:11 观测离榜累计约4小时12分 - 05MAL-2026-14058 · Malicious code in adxaa (npm)
Malicious code in adxaa (npm) Affected packages: npm/adxaa Attributes: No fix available
最高第 1 名00:27 达到00:27 首次观测上榜04:11 观测离榜累计约3小时44分 - 06MAL-2026-14064 · Malicious code in @finaxis/common-js (npm)
Malicious code in @finaxis/common-js (npm) Affected packages: npm/@finaxis/common-js Attributes: No fix available
最高第 1 名01:15 达到01:15 首次观测上榜04:11 观测离榜累计约2小时56分 - 07MAL-2026-14067 · Malicious code in upload-to-gcp (npm)
Malicious code in upload-to-gcp (npm) Affected packages: npm/upload-to-gcp Attributes: No fix available
最高第 1 名02:19 达到02:19 首次观测上榜04:11 观测离榜累计约1小时52分 - 08MAL-2026-14068 · Malicious code in depcruise-wrap-stream-in-html (npm)
Malicious code in depcruise-wrap-stream-in-html (npm) Affected packages: npm/depcruise-wrap-stream-in-html Attributes: No fix available
最高第 1 名03:07 达到03:07 首次观测上榜04:11 观测离榜累计约1小时4分 - 09MINI-25f5-pqvx-6j9p · MinimOS/libvirt-hook-client-1.8
Affected packages: MinimOS/libvirt-hook-client-1.8、MinimOS/virt-api-1.8、MinimOS/virt-chroot-1.8、MinimOS/virt-exportproxy-1.8、MinimOS/virt-exportserver-1.8、... 7 more Attributes: Fix available
最高第 1 名16:11 达到16:11 首次观测上榜21:15 观测离榜累计约5小时4分 - 10MINI-26qj-cpg6-wxv2 · MinimOS/volume-modifier-for-k8s-fips
Affected packages: MinimOS/volume-modifier-for-k8s-fips Attributes: Fix available
最高第 1 名10:19 达到10:19 首次观测上榜16:11 观测离榜累计约5小时52分 - 11MINI-3mww-wwcm-fpwp · MinimOS/kyverno-readiness-checker-1.17
Affected packages: MinimOS/kyverno-readiness-checker-1.17 Attributes: Fix available
最高第 1 名22:03 达到22:03 首次观测上榜22:19 观测离榜累计约16分钟 - 12MINI-583j-fc7p-xpvq · MinimOS/argo-workflow-executor-fips-3.7
Affected packages: MinimOS/argo-workflow-executor-fips-3.7 Attributes: No fix available
最高第 1 名04:11 达到04:11 首次观测上榜10:19 观测离榜累计约6小时8分 - 13MINI-9f67-wpjv-2wh8 · MinimOS/percona-server-9.7
Affected packages: MinimOS/percona-server-9.7、MinimOS/percona-server-9.7-client、MinimOS/percona-server-9.7-dev、MinimOS/percona-server-9.7-doc、MinimOS/percona-server-9.7-oci-entrypoint、... 2 more Attributes: Fix available
最高第 1 名22:19 达到22:19 首次观测上榜当日结束时仍在榜累计约1小时36分 - 14MINI-9hmf-624v-wh2w · MinimOS/clamav-1.5
Affected packages: MinimOS/clamav-1.5、MinimOS/clamav-1.5-clamdscan、MinimOS/clamav-1.5-daemon、MinimOS/clamav-1.5-db、MinimOS/clamav-1.5-dev、... 6 more Attributes: Fix available
最高第 1 名21:15 达到21:15 首次观测上榜22:03 观测离榜累计约48分钟 - 15MINI-jp52-45m5-4q4q · MinimOS/docker-scout-1.24
Affected packages: MinimOS/docker-scout-1.24 Attributes: Fix available
最高第 1 名21:31 达到21:31 首次观测上榜22:03 观测离榜累计约32分钟 - 16MINI-pfcq-gjm4-cvfx · MinimOS/freerdp-2
Affected packages: MinimOS/freerdp-2 Attributes: Fix available
最高第 1 名22:35 达到22:35 首次观测上榜当日结束时仍在榜累计约1小时20分 - 17MINI-pghm-3v4g-cv7x · MinimOS/pdfcpu-fips-0.12
Affected packages: MinimOS/pdfcpu-fips-0.12 Attributes: No fix available
最高第 1 名04:43 达到04:43 首次观测上榜10:19 观测离榜累计约5小时36分 - 18ROOT-APP-NPM-AIKIDO-2026-10759 · AIKIDO-2026-10759 in next - Patched by Root
AIKIDO-2026-10759 in next - Patched by Root Affected packages: Root:npm/@rootio/next、Root:npm/next Attributes: Fix available
最高第 1 名17:15 达到17:15 首次观测上榜22:03 观测离榜累计约4小时48分 - 19ROOT-APP-NPM-CVE-2023-26133 · CVE-2023-26133 in progressbar.js - Patched by Root
CVE-2023-26133 in progressbar.js - Patched by Root Affected packages: Root:npm/@rootio/progressbar.js、Root:npm/progressbar.js Attributes: Fix available
最高第 1 名23:39 达到23:39 首次观测上榜当日结束时仍在榜累计约16分钟 - 20ROOT-APP-NPM-CVE-2025-64756 · CVE-2025-64756 in glob - Patched by Root
CVE-2025-64756 in glob - Patched by Root Affected packages: Root:npm/@rootio/glob、Root:npm/glob Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名19:07 达到17:15 首次观测上榜22:03 观测离榜累计约4小时48分 - 21ECHO-25c0-43ef-f653 · Echo/libgit2
Affected packages: Echo/libgit2 Attributes: No fix available
最高第 2 名04:59 达到04:59 首次观测上榜10:19 观测离榜累计约5小时20分 - 22ECHO-6e5f-914c-dcac · Echo/libdbi-perl
Affected packages: Echo/libdbi-perl Attributes: No fix available
最高第 2 名10:51 达到10:51 首次观测上榜16:11 观测离榜累计约5小时20分 - 23ECHO-d43e-4b7e-6cc8 · Echo:PyPi/apache-airflow-providers-common-sql
Affected packages: Echo:PyPi/apache-airflow-providers-common-sql Attributes: Fix available
最高第 2 名08:59 达到08:59 首次观测上榜10:19 观测离榜累计约1小时20分 - 24MAL-2026-14053 · Malicious code in depcruise-baseline (npm)
Malicious code in depcruise-baseline (npm) Affected packages: npm/depcruise-baseline Attributes: No fix available
最高第 2 名00:00 达到当日首次采集时已在榜04:11 观测离榜累计约4小时12分 - 25MAL-2026-14057 · Malicious code in @openrepl/shared (npm)
Malicious code in @openrepl/shared (npm) Affected packages: npm/@openrepl/shared Attributes: No fix available
最高第 2 名00:27 达到00:27 首次观测上榜04:11 观测离榜累计约3小时44分 - 26MAL-2026-14066 · Malicious code in akamaijs-sensorv1 (npm)
Malicious code in akamaijs-sensorv1 (npm) Affected packages: npm/akamaijs-sensorv1 Attributes: No fix available
最高第 2 名02:19 达到02:19 首次观测上榜04:11 观测离榜累计约1小时52分 - 27MINI-2f82-q5r9-vhv7 · MinimOS/libvirt-hook-client-1.9
Affected packages: MinimOS/libvirt-hook-client-1.9、MinimOS/virt-api-1.9、MinimOS/virt-chroot-1.9、MinimOS/virt-exportproxy-1.9、MinimOS/virt-exportserver-1.9、... 7 more Attributes: Fix available
最高第 2 名16:11 达到16:11 首次观测上榜21:15 观测离榜累计约5小时4分 - 28MINI-8xpf-h6cc-p32h · MinimOS/freerdp-2
Affected packages: MinimOS/freerdp-2 Attributes: No fix available
最高第 2 名22:35 达到22:35 首次观测上榜当日结束时仍在榜累计约1小时20分 - 29MINI-99vr-f8xx-g3pv · MinimOS/volume-modifier-for-k8s-fips
Affected packages: MinimOS/volume-modifier-for-k8s-fips Attributes: Fix available
最高第 2 名10:19 达到10:19 首次观测上榜16:11 观测离榜累计约5小时52分 - 30MINI-9fhf-qhwr-62cg · MinimOS/docker-scout-1.24
Affected packages: MinimOS/docker-scout-1.24 Attributes: No fix available
最高第 2 名21:31 达到21:31 首次观测上榜22:03 观测离榜累计约32分钟 - 31MINI-c228-2qf4-85q5 · MinimOS/kyverno-readiness-checker-1.17
Affected packages: MinimOS/kyverno-readiness-checker-1.17 Attributes: Fix available
最高第 2 名22:03 达到22:03 首次观测上榜22:19 观测离榜累计约16分钟 - 32MINI-fhg8-g9h5-qcwc · MinimOS/pdfcpu-0.12
Affected packages: MinimOS/pdfcpu-0.12 Attributes: No fix available
最高第 2 名04:43 达到04:43 首次观测上榜10:19 观测离榜累计约5小时36分 - 33MINI-hgcm-2h3h-f55p · MinimOS/argo-workflow-executor-fips-3.7
Affected packages: MinimOS/argo-workflow-executor-fips-3.7 Attributes: No fix available
最高第 2 名04:11 达到04:11 首次观测上榜10:19 观测离榜累计约6小时8分 - 34MINI-jw8p-h453-3x37 · MinimOS/portainer-ce-2.39
Affected packages: MinimOS/portainer-ce-2.39 Attributes: Fix available
最高第 2 名22:19 达到22:19 首次观测上榜当日结束时仍在榜累计约1小时36分 - 35MINI-r98c-2pfh-2854 · MinimOS/clamav
Affected packages: MinimOS/clamav、MinimOS/clamav-clamdscan、MinimOS/clamav-daemon、MinimOS/clamav-db、MinimOS/clamav-dev、... 6 more Attributes: Fix available
最高第 2 名21:15 达到21:15 首次观测上榜22:03 观测离榜累计约48分钟 - 36ROOT-APP-NPM-CVE-2025-59471 · CVE-2025-59471 in next - Patched by Root
CVE-2025-59471 in next - Patched by Root Affected packages: Root:npm/@rootio/next、Root:npm/next Attributes: Fix available
最高第 2 名17:15 达到17:15 首次观测上榜22:03 观测离榜累计约4小时48分 - 37ROOT-APP-NPM-CVE-2026-4923 · CVE-2026-4923 in path-to-regexp - Patched by Root
CVE-2026-4923 in path-to-regexp - Patched by Root Affected packages: Root:npm/@rootio/path-to-regexp、Root:npm/path-to-regexp Attributes: Fix available、Severity - 5.9 (Medium)
最高第 2 名19:07 达到19:07 首次观测上榜22:03 观测离榜累计约2小时56分 - 38MAL-2026-14054 · Malicious code in depcruise-fmt (npm)
Malicious code in depcruise-fmt (npm) Affected packages: npm/depcruise-fmt Attributes: No fix available
最高第 3 名00:00 达到当日首次采集时已在榜04:11 观测离榜累计约4小时12分 - 39MAL-2026-14060 · Malicious code in fastly-vcl-language-client (npm)
Malicious code in fastly-vcl-language-client (npm) Affected packages: npm/fastly-vcl-language-client Attributes: No fix available
最高第 3 名00:27 达到00:27 首次观测上榜04:11 观测离榜累计约3小时44分 - 40MAL-2026-14065 · Malicious code in akamai-sensor (npm)
Malicious code in akamai-sensor (npm) Affected packages: npm/akamai-sensor Attributes: No fix available
最高第 3 名02:19 达到02:19 首次观测上榜04:11 观测离榜累计约1小时52分 - 41MINI-2q5j-hw4g-rh92 · MinimOS/libvirt-hook-client-1.9
Affected packages: MinimOS/libvirt-hook-client-1.9、MinimOS/virt-api-1.9、MinimOS/virt-chroot-1.9、MinimOS/virt-exportproxy-1.9、MinimOS/virt-exportserver-1.9、... 7 more Attributes: Fix available
最高第 3 名16:11 达到16:11 首次观测上榜21:15 观测离榜累计约5小时4分 - 42MINI-88rw-wh7h-75qw · MinimOS/chronograf
Affected packages: MinimOS/chronograf Attributes: No fix available
最高第 3 名22:19 达到22:19 首次观测上榜当日结束时仍在榜累计约1小时36分 - 43MINI-cgf5-24xc-hpjc · MinimOS/kyverno-readiness-checker-1.17
Affected packages: MinimOS/kyverno-readiness-checker-1.17 Attributes: Fix available
最高第 3 名22:03 达到22:03 首次观测上榜22:19 观测离榜累计约16分钟 - 44MINI-fgj3-5xqq-mwvj · MinimOS/freerdp-2
Affected packages: MinimOS/freerdp-2、MinimOS/freerdp-2-alsa、MinimOS/freerdp-2-cups、MinimOS/freerdp-2-dev、MinimOS/freerdp-2-libs、... 5 more Attributes: Fix available
最高第 3 名22:35 达到22:35 首次观测上榜当日结束时仍在榜累计约1小时20分 - 45MINI-g2v4-gwq7-xcw4 · MinimOS/volume-modifier-for-k8s-fips
Affected packages: MinimOS/volume-modifier-for-k8s-fips Attributes: Fix available
最高第 3 名10:19 达到10:19 首次观测上榜16:11 观测离榜累计约5小时52分 - 46MINI-p2x7-fc65-88rr · MinimOS/argo-workflow-executor-fips-3.7
Affected packages: MinimOS/argo-workflow-executor-fips-3.7 Attributes: No fix available
最高第 3 名04:11 达到04:11 首次观测上榜10:19 观测离榜累计约6小时8分 - 47MINI-r9gj-pj4m-655q · MinimOS/docker-scout-1.24
Affected packages: MinimOS/docker-scout-1.24 Attributes: Fix available
最高第 3 名21:31 达到21:31 首次观测上榜22:03 观测离榜累计约32分钟 - 48ROOT-APP-NPM-CVE-2024-38355 · CVE-2024-38355 in socket.io - Patched by Root
CVE-2024-38355 in socket.io - Patched by Root Affected packages: Root:npm/@rootio/socket.io、Root:npm/socket.io Attributes: Fix available
最高第 3 名21:15 达到21:15 首次观测上榜22:03 观测离榜累计约48分钟 - 49ROOT-APP-NPM-CVE-2026-44573 · CVE-2026-44573 in next - Patched by Root
CVE-2026-44573 in next - Patched by Root Affected packages: Root:npm/@rootio/next、Root:npm/next Attributes: Fix available
最高第 3 名17:15 达到17:15 首次观测上榜22:03 观测离榜累计约4小时48分 - 50ROOT-APP-NPM-CVE-2026-4926 · CVE-2026-4926 in path-to-regexp - Patched by Root
CVE-2026-4926 in path-to-regexp - Patched by Root Affected packages: Root:npm/@rootio/path-to-regexp、Root:npm/path-to-regexp Attributes: Fix available、Severity - 7.5 (High)
最高第 3 名19:07 达到19:07 首次观测上榜22:03 观测离榜累计约2小时56分


































































































