
OSV.dev · 实时热榜
- 01UBUNTU-CVE-2026-75803 · Ubuntu:22.04:LTS/openssl
Affected packages: Ubuntu:22.04:LTS/openssl、Ubuntu:24.04:LTS/edk2、Ubuntu:24.04:LTS/openssl、Ubuntu:26.04:LTS/edk2、Ubuntu:26.04:LTS/openssl、... 7 more Attributes: No fix available
最高第 1 名00:00 达到当日首次采集时已在榜当日结束时仍在榜累计约23小时57分 - 02BELL-CVE-2026-74582 · Alpaquita:23/linux-lts
Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: No fix available
最高第 2 名15:23 达到15:23 首次观测上榜18:36 观测离榜累计约3小时13分 - 03CLSA-2026-1787333890 · TuxCare security update for io.netty (59 CVEs)
TuxCare security update for io.netty (59 CVEs) Affected packages: TuxCare:Maven/io.netty:netty-all、TuxCare:Maven/io.netty:netty-bom、TuxCare:Maven/io.netty:netty-buffer、TuxCare:Maven/io.netty:netty-codec、TuxCare:Maven/io.netty:netty-codec-dns、... 42 more Attributes: Fix available
最高第 2 名02:56 达到02:56 首次观测上榜04:38 观测离榜累计约1小时42分 - 04CLSA-2026-1787374807 · TuxCare security update for io.projectreactor.netty (1 CVE)
TuxCare security update for io.projectreactor.netty (1 CVE) Affected packages: TuxCare:Maven/io.projectreactor.netty:reactor-netty、TuxCare:Maven/io.projectreactor.netty:reactor-netty-core、TuxCare:Maven/io.projectreactor.netty:reactor-netty-http、TuxCare:Maven/io.projectreactor.netty:reactor-netty-http-brave Attributes: Fix available
最高第 2 名15:07 达到15:07 首次观测上榜17:15 观测离榜累计约2小时8分 - 05CLSA-2026-1787397404 · TuxCare security update for io.netty (59 CVEs)
TuxCare security update for io.netty (59 CVEs) Affected packages: TuxCare:Maven/io.netty:netty-all、TuxCare:Maven/io.netty:netty-bom、TuxCare:Maven/io.netty:netty-buffer、TuxCare:Maven/io.netty:netty-codec、TuxCare:Maven/io.netty:netty-codec-dns、... 42 more Attributes: Fix available
最高第 2 名21:00 达到21:00 首次观测上榜22:36 观测离榜累计约1小时36分 - 06DEBIAN-CVE-2026-19685 · Debian:11/network-manager
Affected packages: Debian:11/network-manager、Debian:12/network-manager、Debian:13/network-manager、Debian:14/network-manager Attributes: No fix available
最高第 2 名01:04 达到01:04 首次观测上榜03:34 观测离榜累计约2小时30分 - 07DEBIAN-CVE-2026-77682 · Debian:11/epiphany-browser
Affected packages: Debian:11/epiphany-browser、Debian:12/epiphany-browser、Debian:13/epiphany-browser、Debian:14/epiphany-browser Attributes: No fix available
最高第 2 名23:08 达到23:08 首次观测上榜当日结束时仍在榜累计约48分钟 - 08ECHO-89e1-36b7-43be · Echo/python-webob
Affected packages: Echo/python-webob Attributes: No fix available
最高第 2 名04:22 达到04:22 首次观测上榜05:10 观测离榜累计约48分钟 - 09ECHO-929c-25c5-f964 · Echo/lxml
Affected packages: Echo/lxml Attributes: No fix available
最高第 2 名16:27 达到16:27 首次观测上榜18:36 观测离榜累计约2小时9分 - 10ECHO-fcda-4df0-f457 · Echo/chromium
Affected packages: Echo/chromium Attributes: No fix available
最高第 2 名15:55 达到15:55 首次观测上榜18:36 观测离榜累计约2小时41分 - 11GHSA-2943-5xfg-gq5f · JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions Affected packages: npm/jsonata Attributes: Fix available、Severity - 9.3 (Critical)
最高第 2 名05:10 达到05:10 首次观测上榜05:42 观测离榜累计约32分钟 - 12GHSA-66mm-25pp-rfff · JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions Affected packages: npm/jsonata Attributes: Fix available、Severity - 9.3 (Critical)
最高第 2 名05:26 达到05:26 首次观测上榜05:58 观测离榜累计约32分钟 - 13GHSA-8hgv-xc77-jmcr · Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin
Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin Affected packages: Packagist/getgrav/grav Attributes: Fix available、Severity - 5.1 (Medium)
最高第 2 名03:34 达到03:34 首次观测上榜05:10 观测离榜累计约1小时36分 - 14GHSA-mqjf-5f49-2fjh · GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers Affected packages: Maven/org.geotools.jdbc:gt-jdbc-postgis Attributes: Fix available、Severity - 9.8 (Critical)
最高第 2 名04:38 达到04:38 首次观测上榜05:10 观测离榜累计约32分钟 - 15JLSEC-2026-1369 · Julia/LibGit2_jll
Affected packages: Julia/LibGit2_jll Attributes: Fix available、Severity - 6.5 (Medium)
最高第 2 名05:42 达到05:42 首次观测上榜06:14 观测离榜累计约32分钟 - 16MAL-2026-14354 · Malicious code in kelly-sizing (npm)
Malicious code in kelly-sizing (npm) Affected packages: npm/kelly-sizing Attributes: No fix available
最高第 2 名01:36 达到01:36 首次观测上榜03:34 观测离榜累计约1小时58分 - 17MAL-2026-14356 · Malicious code in lumen-pages-community (npm)
Malicious code in lumen-pages-community (npm) Affected packages: npm/lumen-pages-community Attributes: No fix available
最高第 2 名07:02 达到07:02 首次观测上榜11:02 观测离榜累计约4小时 - 18MAL-2026-14357 · Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)
Malicious code in @postman-cse/okta-aio-linux-arm64 (npm) Affected packages: npm/@postman-cse/okta-aio-linux-arm64 Attributes: No fix available
最高第 2 名10:14 达到10:14 首次观测上榜11:02 观测离榜累计约48分钟 - 19MAL-2026-14358 · Malicious code in scrambleeeer (PyPI)
Malicious code in scrambleeeer (PyPI) Affected packages: PyPI/scrambleeeer Attributes: No fix available
最高第 2 名18:20 达到18:20 首次观测上榜21:00 观测离榜累计约2小时40分 - 20MINI-2f64-7329-768j · MinimOS/traefik-2
Affected packages: MinimOS/traefik-2 Attributes: No fix available
最高第 2 名06:30 达到06:30 首次观测上榜06:46 观测离榜累计约16分钟 - 21MINI-35pj-869p-mq6r · MinimOS/prometheus-fips-3.9
Affected packages: MinimOS/prometheus-fips-3.9 Attributes: No fix available
最高第 2 名06:14 达到06:14 首次观测上榜06:46 观测离榜累计约32分钟 - 22MINI-43ff-34wj-8f32 · MinimOS/grafana-fips-12.0
Affected packages: MinimOS/grafana-fips-12.0 Attributes: No fix available
最高第 2 名00:00 达到00:00 首次观测上榜01:04 观测离榜累计约1小时4分 - 23MINI-498c-9w7x-v8hj · MinimOS/rancher-fleet-agent-0.12
Affected packages: MinimOS/rancher-fleet-agent-0.12 Attributes: Fix available
最高第 2 名11:02 达到11:02 首次观测上榜17:15 观测离榜累计约6小时13分 - 24MINI-53mh-rg6x-j4h8 · MinimOS/grafana-fips-12.3
Affected packages: MinimOS/grafana-fips-12.3 Attributes: No fix available
最高第 2 名00:16 达到00:16 首次观测上榜02:56 观测离榜累计约2小时40分 - 25MINI-g2rc-pw58-4c2v · MinimOS/eks-kube-apiserver-1.31
Affected packages: MinimOS/eks-kube-apiserver-1.31、MinimOS/eks-kube-controller-manager-1.31、MinimOS/eks-kube-proxy-1.31、MinimOS/eks-kube-scheduler-1.31、MinimOS/eks-kubelet-1.31 Attributes: No fix available
最高第 2 名00:00 达到当日首次采集时已在榜00:00 观测离榜累计约1分钟 - 26MINI-gxwr-h9h8-9xgj · MinimOS/grafana-12.0
Affected packages: MinimOS/grafana-12.0 Attributes: No fix available
最高第 2 名22:36 达到22:36 首次观测上榜当日结束时仍在榜累计约1小时20分 - 27MINI-h8gf-jx25-5wpp · MinimOS/rancher-fleet-0.14
Affected packages: MinimOS/rancher-fleet-0.14、MinimOS/rancher-fleet-0.14-fleet-cli Attributes: Fix available
最高第 2 名17:15 达到17:15 首次观测上榜18:36 观测离榜累计约1小时21分 - 28MINI-rwmv-99jw-62r4 · MinimOS/weaviate-fips-1.36
Affected packages: MinimOS/weaviate-fips-1.36 Attributes: No fix available
最高第 2 名06:46 达到06:46 首次观测上榜11:02 观测离榜累计约4小时16分 - 29MINI-vpgg-7r99-qwcx · MinimOS/paketo-buildpacks-go-dist
Affected packages: MinimOS/paketo-buildpacks-go-dist Attributes: No fix available
最高第 2 名05:58 达到05:58 首次观测上榜06:14 观测离榜累计约16分钟 - 30RHSA-2026:58420 · Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Affected packages: Red Hat:hummingbird:1/python3.12 Attributes: Fix available、Severity - 6.8 (Medium)
最高第 2 名18:36 达到18:36 首次观测上榜22:36 观测离榜累计约4小时 - 31ROOT-APP-NPM-CVE-2026-56876 · CVE-2026-56876 in extract-zip - Patched by Root
CVE-2026-56876 in extract-zip - Patched by Root Affected packages: Root:npm/@rootio/extract-zip、Root:npm/extract-zip Attributes: Fix available
最高第 2 名03:12 达到03:12 首次观测上榜05:10 观测离榜累计约1小时58分 - 32BELL-CVE-2026-74581 · Alpaquita:23/linux-lts
Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: Fix available
最高第 3 名15:23 达到15:23 首次观测上榜18:36 观测离榜累计约3小时13分 - 33ECHO-96c3-feb5-f565 · Echo/chromium
Affected packages: Echo/chromium Attributes: No fix available
最高第 3 名15:55 达到15:55 首次观测上榜18:36 观测离榜累计约2小时41分 - 34GHSA-2cp2-2r3c-7p7r · Hydra: hydra.utils.instantiate with untrusted config can lead to code execution
Hydra: hydra.utils.instantiate with untrusted config can lead to code execution Affected packages: PyPI/hydra-core Attributes: Fix available、Severity - 7.8 (High)
最高第 3 名05:10 达到05:10 首次观测上榜05:42 观测离榜累计约32分钟 - 35GHSA-w4mq-xh27-6xpx · Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username Affected packages: npm/unleash-server Attributes: Fix available、Severity - 4.1 (Medium)
最高第 3 名03:34 达到03:34 首次观测上榜05:10 观测离榜累计约1小时36分 - 36JLSEC-2026-1370 · Julia/LibGit2_jll
Affected packages: Julia/LibGit2_jll Attributes: Fix available、Severity - 4.3 (Medium)
最高第 3 名05:42 达到05:42 首次观测上榜06:14 观测离榜累计约32分钟 - 37MAL-2026-14355 · Malicious code in fuel-react (npm)
Malicious code in fuel-react (npm) Affected packages: npm/fuel-react Attributes: No fix available
最高第 3 名07:02 达到07:02 首次观测上榜11:02 观测离榜累计约4小时 - 38MINI-7gj7-qpx8-mg35 · MinimOS/rancher-fleet-agent-0.12
Affected packages: MinimOS/rancher-fleet-agent-0.12 Attributes: Fix available
最高第 3 名11:02 达到11:02 首次观测上榜16:27 观测离榜累计约5小时25分 - 39MINI-88jj-m2q2-gq6r · MinimOS/grafana-fips-11.4
Affected packages: MinimOS/grafana-fips-11.4 Attributes: No fix available
最高第 3 名00:00 达到00:00 首次观测上榜01:04 观测离榜累计约1小时4分 - 40MINI-f9r2-crvp-q7f2 · MinimOS/grafana-11.6
Affected packages: MinimOS/grafana-11.6 Attributes: No fix available
最高第 3 名22:36 达到22:36 首次观测上榜当日结束时仍在榜累计约1小时20分 - 41MINI-pv4h-63jx-h7pg · MinimOS/weaviate-fips-1.35
Affected packages: MinimOS/weaviate-fips-1.35 Attributes: No fix available
最高第 3 名06:46 达到06:46 首次观测上榜11:02 观测离榜累计约4小时16分 - 42MINI-q8jg-5wwf-rqw4 · MinimOS/grafana-fips-12.3
Affected packages: MinimOS/grafana-fips-12.3 Attributes: No fix available
最高第 3 名00:16 达到00:16 首次观测上榜01:52 观测离榜累计约1小时36分 - 43MINI-vr56-9vgp-8mq4 · MinimOS/eks-distro-1.36-coredns-fips-1.13.2
Affected packages: MinimOS/eks-distro-1.36-coredns-fips-1.13.2、MinimOS/eks-distro-1.36-coredns-fips-1.14.2 Attributes: No fix available
最高第 3 名00:00 达到当日首次采集时已在榜00:00 观测离榜累计约1分钟 - 44MINI-wfvv-c866-v996 · MinimOS/terraform-fips-1.13
Affected packages: MinimOS/terraform-fips-1.13 Attributes: No fix available
最高第 3 名06:30 达到06:30 首次观测上榜06:46 观测离榜累计约16分钟 - 45MINI-wm3h-3xhr-fw9v · MinimOS/rancher-fleet-fips-0.14
Affected packages: MinimOS/rancher-fleet-fips-0.14、MinimOS/rancher-fleet-fips-0.14-fleet-cli Attributes: Fix available
最高第 3 名17:15 达到17:15 首次观测上榜18:36 观测离榜累计约1小时21分 - 46MINI-wrmw-8fm3-w3xc · MinimOS/prometheus-fips-3.8
Affected packages: MinimOS/prometheus-fips-3.8 Attributes: No fix available
最高第 3 名06:14 达到06:14 首次观测上榜06:46 观测离榜累计约32分钟 - 47RHSA-2026:58474 · Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Affected packages: Red Hat:hummingbird:1/apr-util Attributes: Fix available、Severity - 7.5 (High)
最高第 3 名18:36 达到18:36 首次观测上榜22:36 观测离榜累计约4小时 - 48ROOT-APP-NPM-CVE-2026-33750 · CVE-2026-33750 in brace-expansion - Patched by Root
CVE-2026-33750 in brace-expansion - Patched by Root Affected packages: Root:npm/@rootio/brace-expansion、Root:npm/brace-expansion Attributes: Fix available、Severity - 6.5 (Medium)
最高第 3 名01:04 达到01:04 首次观测上榜04:06 观测离榜累计约3小时2分 - 49BELL-CVE-2026-74583 · Alpaquita:23/linux-lts
Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: No fix available
最高第 4 名15:23 达到15:23 首次观测上榜18:36 观测离榜累计约3小时13分 - 50CLSA-2026-1787331164 · TuxCare security update for io.netty (46 CVEs)
TuxCare security update for io.netty (46 CVEs) Affected packages: TuxCare:Maven/io.netty:netty-all、TuxCare:Maven/io.netty:netty-bom、TuxCare:Maven/io.netty:netty-buffer、TuxCare:Maven/io.netty:netty-codec、TuxCare:Maven/io.netty:netty-codec-dns、... 42 more Attributes: Fix available
最高第 4 名02:56 达到02:56 首次观测上榜03:34 观测离榜累计约38分钟


































































































