OSV.dev · 实时热榜

Malicious code in @coralxyz/anchor (npm) Affected packages: npm/@coralxyz/anchor Attributes: No fix available

Malicious code in titan-exchange-shared-permissions (npm) Affected packages: npm/titan-exchange-shared-permissions Attributes: No fix available

Affected packages: MinimOS/external-secrets-operator-fips Attributes: Fix available

Affected packages: MinimOS/external-secrets-operator Attributes: Fix available

Affected packages: MinimOS/gotenberg、MinimOS/gotenberg-libreoffice Attributes: Fix available

Affected packages: Echo/zip Attributes: No fix available

Affected packages: MinimOS/external-secrets-operator-fips Attributes: Fix available

Affected packages: MinimOS/external-secrets-operator Attributes: Fix available

Malicious code in @rbx-ts/services (npm) Affected packages: npm/@rbx-ts/services Attributes: No fix available

Malicious code in localization-fixer (npm) Affected packages: npm/localization-fixer Attributes: No fix available

Malicious code in map-streak-kit (npm) Affected packages: npm/map-streak-kit Attributes: No fix available

Malicious code in modern-localization (npm) Affected packages: npm/modern-localization Attributes: No fix available

Malicious code in sme-rko-finance-front-operations-notifications-impl (npm) Affected packages: npm/sme-rko-finance-front-operations-notifications-impl Attributes: No fix available

Malicious code in sme-rko-finance-front-operations-tax (npm) Affected packages: npm/sme-rko-finance-front-operations-tax Attributes: No fix available

Malicious code in sme-rko-finance-front-payments-domain (npm) Affected packages: npm/sme-rko-finance-front-payments-domain Attributes: No fix available

Malicious code in sme-rko-finance-front-payments-feed-adapter (npm) Affected packages: npm/sme-rko-finance-front-payments-feed-adapter Attributes: No fix available

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 9.8 (Critical)

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 7.5 (High)

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 9.1 (Critical)

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 7.5 (High)

Successfully using libcurl to do a transfer to a specific HTTP origin ( ` hostA ` ) with **Digest**... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 9.8 (Critical)

When a user invokes curl using a schemeless URL combined with ` --proto-default ` sftp (or scp), a... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 7.5 (High)

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 5.9 (Medium)

libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 6.5 (Medium)

Affected packages: Echo/ffmpeg Attributes: No fix available

Affected packages: Echo/ffmpeg Attributes: No fix available

Affected packages: Echo/ffmpeg Attributes: No fix available

Affected packages: Echo/ffmpeg Attributes: No fix available

Affected packages: Echo/ffmpeg Attributes: No fix available

Affected packages: Chainguard/tensorflow-cpu-jupyter Attributes: Fix available

Affected packages: Chainguard/flux-notification-controller、Wolfi/flux-notification-controller Attributes: Fix available

Affected packages: Chainguard/flux-notification-controller、Wolfi/flux-notification-controller Attributes: Fix available

Affected packages: Chainguard/tensorflow-cpu-jupyter Attributes: Fix available

Affected packages: Chainguard/tensorflow-cpu-jupyter Attributes: Fix available

Affected packages: Debian:11/libheif、Debian:12/libheif、Debian:13/libheif、Debian:14/libheif Attributes: Fix available

Affected packages: Debian:11/libheif、Debian:12/libheif、Debian:13/libheif、Debian:14/libheif Attributes: Fix available

Red Hat Enhancement Advisory: Red Hat Edge Manager Version 1.1.2 Affected packages: Red Hat:edge_manager:1.1::el10/flightctl、Red Hat:edge_manager:1.1::el10/flightctl-agent、Red Hat:edge_manager:1.1::el10/flightctl-cli、Red Hat:edge_manager:1.1::el10/flightctl-observability、Red Hat:edge_manager:1.1::el10/flightctl-selinux、... 7 more Attributes: Fix available、Severity - 7.5 (High)

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Affected packages: Red Hat:hummingbird:1/tar Attributes: Fix available、Severity - 4.4 (Medium)

Red Hat Security Advisory: kernel security, bug fix, and enhancement update Affected packages: Red Hat:rhel_e4s:9.2::appstream/bpftool-debuginfo、Red Hat:rhel_e4s:9.2::appstream/kernel-64k-debug-debuginfo、Red Hat:rhel_e4s:9.2::appstream/kernel-64k-debug-devel、Red Hat:rhel_e4s:9.2::appstream/kernel-64k-debug-devel-matched、Red Hat:rhel_e4s:9.2::appstream/kernel-64k-debuginfo、... 66 more Attributes: Fix available、Severity - 8.4 (High)

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Affected packages: Red Hat:rhel_e4s:9.2::nfv/kernel-rt、Red Hat:rhel_e4s:9.2::nfv/kernel-rt-core、Red Hat:rhel_e4s:9.2::nfv/kernel-rt-debug、Red Hat:rhel_e4s:9.2::nfv/kernel-rt-debug-core、Red Hat:rhel_e4s:9.2::nfv/kernel-rt-debug-debuginfo、... 27 more Attributes: Fix available、Severity - 8.4 (High)

libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl... Affected packages: Julia/CURL_jll、Julia/LibCURL_jll Attributes: Fix available、Severity - 7.5 (High)

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4 RPM release advisory Affected packages: Red Hat:openshift:4.4::el7/ansible-asb-modules、Red Hat:openshift:4.4::el7/ansible-kubernetes-modules、Red Hat:openshift:4.4::el7/ansible-runner、Red Hat:openshift:4.4::el7/ansible-runner-http、Red Hat:openshift:4.4::el7/apb、... 306 more Attributes: Fix available、Severity - 8.8 (High)

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.17.44 packages update Affected packages: Red Hat:openshift:4.17::el8/runc、Red Hat:openshift:4.17::el8/runc-debuginfo、Red Hat:openshift:4.17::el8/runc-debugsource、Red Hat:openshift:4.17::el9/runc、Red Hat:openshift:4.17::el9/runc-debuginfo、... 1 more Attributes: Fix available、Severity - 8.2 (High)

Red Hat Enhancement Advisory: Red Hat build of MicroShift 4.18.1 security update Affected packages: Red Hat:openshift:4.18::el9/microshift、Red Hat:openshift:4.18::el9/microshift-gateway-api、Red Hat:openshift:4.18::el9/microshift-gateway-api-release-info、Red Hat:openshift:4.18::el9/microshift-greenboot、Red Hat:openshift:4.18::el9/microshift-low-latency、... 7 more Attributes: Fix available、Severity - 8.6 (High)

Red Hat Enhancement Advisory: Red Hat OpenShift Service on AWS 1.0 enhancements Affected packages: Red Hat:openshift_service_on_aws:1::el8/rosa、Red Hat:openshift_service_on_aws:1::el8/rosa-redistributable Attributes: Fix available、Severity - 8.2 (High)

Red Hat Security Advisory: kernel security, bug fix, and enhancement update Affected packages: Red Hat:rhel_e4s:9.4::appstream/bpftool-debuginfo、Red Hat:rhel_e4s:9.4::appstream/kernel-64k-debug-debuginfo、Red Hat:rhel_e4s:9.4::appstream/kernel-64k-debug-devel、Red Hat:rhel_e4s:9.4::appstream/kernel-64k-debug-devel-matched、Red Hat:rhel_e4s:9.4::appstream/kernel-64k-debuginfo、... 119 more Attributes: Fix available、Severity - 8.4 (High)

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Affected packages: Red Hat:hummingbird:1/policycoreutils、Red Hat:hummingbird:1/policycoreutils-dbus Attributes: Fix available、Severity - 4.4 (Medium)

Affected packages: Debian:11/libvirt、Debian:12/libvirt、Debian:13/libvirt、Debian:14/libvirt Attributes: No fix available

Affected packages: MinimOS/nodejs-25、MinimOS/nodejs-25-doc、MinimOS/nodejs-25-oci-entrypoint Attributes: No fix available

Affected packages: MinimOS/opensearch-dashboards-3-plugin-reports Attributes: No fix available