
OSV.dev · 实时热榜
- 01DEBIAN-CVE-2026-18477 · Debian:11/tar
Affected packages: Debian:11/tar、Debian:12/tar、Debian:13/tar、Debian:14/tar Attributes: No fix available
最高第 1 名06:15 达到06:15 首次观测上榜14:15 观测离榜累计约8小时 - 02DEBIAN-CVE-2026-18508 · Debian:11/tar
Affected packages: Debian:11/tar、Debian:12/tar、Debian:13/tar、Debian:14/tar Attributes: No fix available
最高第 2 名06:15 达到06:15 首次观测上榜13:43 观测离榜累计约7小时28分 - 03DEBIAN-CVE-2026-12259 · Debian:11/nltk
Affected packages: Debian:11/nltk、Debian:12/nltk、Debian:13/nltk、Debian:14/nltk Attributes: No fix available
最高第 10 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 04DEBIAN-CVE-2026-18651 · Debian:11/389-ds-base
Affected packages: Debian:11/389-ds-base、Debian:12/389-ds-base、Debian:13/389-ds-base Attributes: No fix available
最高第 7 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 05DEBIAN-CVE-2026-61372 · Debian:12/apache-jena
Affected packages: Debian:12/apache-jena、Debian:13/apache-jena、Debian:14/apache-jena Attributes: No fix available
最高第 8 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 06DEBIAN-CVE-2026-68742 · Debian:11/sssd
Affected packages: Debian:11/sssd、Debian:12/sssd、Debian:13/sssd Attributes: No fix available
最高第 3 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 07DEBIAN-CVE-2026-68945 · Debian:11/angular.js
Affected packages: Debian:11/angular.js、Debian:12/angular.js、Debian:13/angular.js、Debian:14/angular.js Attributes: No fix available
最高第 9 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 08DEBIAN-CVE-2026-69097 · Debian:11/python-git
Affected packages: Debian:11/python-git、Debian:12/python-git、Debian:13/python-git、Debian:14/python-git Attributes: No fix available
最高第 4 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 09DEBIAN-CVE-2026-69149 · Debian:11/angular.js
Affected packages: Debian:11/angular.js、Debian:12/angular.js、Debian:13/angular.js、Debian:14/angular.js Attributes: No fix available
最高第 5 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 10DEBIAN-CVE-2026-69153 · Debian:11/node-postcss
Affected packages: Debian:11/node-postcss、Debian:12/node-postcss、Debian:13/node-postcss、Debian:14/node-postcss Attributes: No fix available
最高第 6 名06:15 达到06:15 首次观测上榜11:35 观测离榜累计约5小时20分 - 11MINI-37qv-83hf-55qv · MinimOS/ld-relay-fips
Affected packages: MinimOS/ld-relay-fips Attributes: Fix available
最高第 3 名10:15 达到10:15 首次观测上榜15:03 观测离榜累计约4小时48分 - 12MINI-cqjq-525q-2xrf · MinimOS/tailscale-fips
Affected packages: MinimOS/tailscale-fips Attributes: Fix available
最高第 1 名10:15 达到10:15 首次观测上榜15:03 观测离榜累计约4小时48分 - 13MINI-gw39-vp28-53p6 · MinimOS/ld-relay-fips
Affected packages: MinimOS/ld-relay-fips Attributes: Fix available
最高第 4 名10:15 达到10:15 首次观测上榜15:03 观测离榜累计约4小时48分 - 14MINI-qvjx-9rpr-45xf · MinimOS/ld-relay
Affected packages: MinimOS/ld-relay Attributes: Fix available
最高第 5 名10:15 达到10:15 首次观测上榜15:03 观测离榜累计约4小时48分 - 15MINI-w37f-jfhm-33r7 · MinimOS/tailscale-k8s-operator
Affected packages: MinimOS/tailscale-k8s-operator Attributes: Fix available
最高第 2 名10:15 达到10:15 首次观测上榜15:03 观测离榜累计约4小时48分 - 16GHSA-m2h6-j472-rp4c · python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees Affected packages: PyPI/cryptography Attributes: Fix available、Severity - 6.9 (Medium)
最高第 1 名05:43 达到05:43 首次观测上榜14:31 观测离榜上榜 2 次(重入 1 次)累计约4小时48分 - 17GHSA-jwv3-5hgf-82ww · python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building Affected packages: PyPI/cryptography Attributes: Fix available、Severity - 8.7 (High)
最高第 2 名05:43 达到05:43 首次观测上榜10:15 观测离榜累计约4小时32分 - 18JLSEC-2026-1158 · GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability...
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability... Affected packages: Julia/wget_jll Attributes: No fix available、Severity - 8.7 (High)
最高第 3 名05:43 达到05:43 首次观测上榜10:15 观测离榜累计约4小时32分 - 19JLSEC-2026-1159 · GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in...
GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in... Affected packages: Julia/wget_jll Attributes: No fix available、Severity - 6.9 (Medium)
最高第 4 名05:43 达到05:43 首次观测上榜10:15 观测离榜累计约4小时32分 - 20JLSEC-2026-1160 · GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability...
GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability... Affected packages: Julia/wget_jll Attributes: No fix available、Severity - 6.0 (Medium)
最高第 5 名05:43 达到05:43 首次观测上榜10:15 观测离榜累计约4小时32分 - 21MINI-wppf-vxcv-7pqc · MinimOS/ld-relay
Affected packages: MinimOS/ld-relay Attributes: Fix available
最高第 6 名10:15 达到10:15 首次观测上榜14:31 观测离榜累计约4小时16分 - 22DEBIAN-CVE-2026-69151 · Debian:11/angular.js
Affected packages: Debian:11/angular.js、Debian:12/angular.js、Debian:13/angular.js、Debian:14/angular.js Attributes: No fix available
最高第 11 名06:15 达到06:15 首次观测上榜10:15 观测离榜累计约4小时 - 23RLSA-2023:2771 · Moderate: unbound security and bug fix update
Moderate: unbound security and bug fix update Affected packages: Rocky Linux:8/unbound Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名14:31 达到14:31 首次观测上榜18:31 观测离榜累计约4小时 - 24CGA-48x9-f9mg-3g2g · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 4 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 25CGA-4p4g-gwq9-x2fx · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 2 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 26CGA-798x-xppr-cxp6 · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 3 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 27CGA-7jf8-rg8w-p8j4 · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 5 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 28CGA-gh3g-24x2-4344 · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 1 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 29CGA-m68w-xhj8-gp7j · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 8 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 30CGA-mf48-gfmj-g3ff · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 6 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 31CGA-wf5w-xgxg-f475 · Chainguard/gitlab-rails-ce-assets-fips-19.0
Affected packages: Chainguard/gitlab-rails-ce-assets-fips-19.0、Chainguard/gitlab-rails-ce-doc-fips-19.0、Chainguard/gitlab-rails-ce-fips-19.0 Attributes: Fix available
最高第 7 名11:35 达到11:35 首次观测上榜15:03 观测离榜累计约3小时28分 - 32ROOT-APP-PYPI-CVE-2026-48775 · CVE-2026-48775 in langgraph-checkpoint - Patched by Root
CVE-2026-48775 in langgraph-checkpoint - Patched by Root Affected packages: Root:PyPI/langgraph-checkpoint、Root:PyPI/rootio-langgraph-checkpoint Attributes: Fix available
最高第 2 名15:03 达到15:03 首次观测上榜18:31 观测离榜累计约3小时28分 - 33ROOT-OS-UBUNTU-2204-CVE-2013-7445 · CVE-2013-7445 in linux - Patched by Root
CVE-2013-7445 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 3 名15:03 达到15:03 首次观测上榜18:31 观测离榜累计约3小时28分 - 34ROOT-OS-UBUNTU-2204-CVE-2015-7837 · CVE-2015-7837 in linux - Patched by Root
CVE-2015-7837 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 4 名15:03 达到15:03 首次观测上榜18:31 观测离榜累计约3小时28分 - 35ROOT-OS-UBUNTU-2204-CVE-2015-8553 · CVE-2015-8553 in linux - Patched by Root
CVE-2015-8553 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 5 名15:03 达到15:03 首次观测上榜18:31 观测离榜累计约3小时28分 - 36ROOT-OS-UBUNTU-2204-CVE-2016-8660 · CVE-2016-8660 in linux - Patched by Root
CVE-2016-8660 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 6 名15:03 达到15:03 首次观测上榜18:31 观测离榜累计约3小时28分 - 37ROOT-OS-UBUNTU-2204-CVE-2017-0537 · CVE-2017-0537 in linux - Patched by Root
CVE-2017-0537 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 7 名15:03 达到15:03 首次观测上榜18:31 观测离榜累计约3小时28分 - 38ROOT-OS-UBUNTU-2204-CVE-2017-13165 · CVE-2017-13165 in linux - Patched by Root
CVE-2017-13165 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 8 名15:03 达到15:03 首次观测上榜18:31 观测离榜累计约3小时28分 - 39MINI-38f5-ph4p-mrg6 · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: No fix available
最高第 7 名00:00 达到当日首次采集时已在榜03:03 观测离榜累计约3小时4分 - 40MINI-4c4j-7r87-2gqm · MinimOS/apache-iceberg-sink-connector
Affected packages: MinimOS/apache-iceberg-sink-connector Attributes: No fix available
最高第 1 名00:00 达到当日首次采集时已在榜03:03 观测离榜累计约3小时4分 - 41MINI-5rqc-f835-q9r6 · MinimOS/apache-iceberg-sink-connector
Affected packages: MinimOS/apache-iceberg-sink-connector Attributes: No fix available
最高第 2 名00:00 达到当日首次采集时已在榜03:03 观测离榜累计约3小时4分 - 42MINI-6mw3-rm86-qwq9 · MinimOS/apache-iceberg-sink-connector-fips
Affected packages: MinimOS/apache-iceberg-sink-connector-fips Attributes: No fix available
最高第 4 名00:00 达到当日首次采集时已在榜03:03 观测离榜累计约3小时4分 - 43MINI-8r33-j4ph-wfwx · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: No fix available
最高第 5 名00:00 达到当日首次采集时已在榜03:03 观测离榜累计约3小时4分 - 44MINI-g8vg-fgh6-869m · MinimOS/conductor-fips
Affected packages: MinimOS/conductor-fips Attributes: No fix available
最高第 6 名00:00 达到当日首次采集时已在榜03:03 观测离榜累计约3小时4分 - 45MINI-pc86-qm2h-mv39 · MinimOS/apache-iceberg-sink-connector-fips
Affected packages: MinimOS/apache-iceberg-sink-connector-fips Attributes: No fix available
最高第 3 名00:00 达到当日首次采集时已在榜03:03 观测离榜累计约3小时4分 - 46GHSA-jhpw-976m-542j · Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning Affected packages: npm/@angular/common Attributes: Fix available、Severity - 8.8 (High)
最高第 1 名00:23 达到00:23 首次观测上榜03:19 观测离榜累计约2小时56分 - 47ROOT-OS-UBUNTU-2204-CVE-2017-13693 · CVE-2017-13693 in linux - Patched by Root
CVE-2017-13693 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 9 名15:03 达到15:03 首次观测上榜17:59 观测离榜累计约2小时56分 - 48GHSA-m65r-rprj-r5rg · Russh: Channel-scoped server callbacks can be reached without an open channel
Russh: Channel-scoped server callbacks can be reached without an open channel Affected packages: crates.io/russh Attributes: Fix available、Severity - 6.5 (Medium)
最高第 1 名00:07 达到00:07 首次观测上榜03:03 观测离榜累计约2小时56分 - 49GHSA-jj27-h5hq-8x99 · Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes Affected packages: npm/@angular/compiler、npm/@angular/core Attributes: Fix available、Severity - 7.6 (High)
最高第 1 名00:39 达到00:39 首次观测上榜03:19 观测离榜累计约2小时40分 - 50GHSA-vpx6-8pjr-4g3v · Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS) Affected packages: npm/@angular/platform-server Attributes: Fix available、Severity - 8.6 (High)
最高第 2 名00:39 达到00:39 首次观测上榜03:19 观测离榜累计约2小时40分


































































































