OSV.dev · 实时热榜
- 01MAL-2026-13712 · Malicious code in bigtime (PyPI)
Malicious code in bigtime (PyPI) Affected packages: PyPI/bigtime Attributes: No fix available
最高第 1 名06:07 达到06:07 首次观测上榜14:39 观测离榜累计约8小时32分 - 02ECHO-0ea6-1c68-a084 · Echo/gst-plugins-bad1.0
Affected packages: Echo/gst-plugins-bad1.0 Attributes: No fix available
最高第 1 名05:35 达到05:35 首次观测上榜14:07 观测离榜累计约8小时32分 - 03ROOT-OS-UBUNTU-2204-CVE-2025-27613 · CVE-2025-27613 in git - Patched by Root
CVE-2025-27613 in git - Patched by Root Affected packages: Root:Ubuntu:22.04/git、Root:Ubuntu:22.04/rootio-git Attributes: Fix available
最高第 2 名06:23 达到06:23 首次观测上榜14:39 观测离榜累计约8小时16分 - 04ROOT-OS-UBUNTU-2204-CVE-2025-46835 · CVE-2025-46835 in git - Patched by Root
CVE-2025-46835 in git - Patched by Root Affected packages: Root:Ubuntu:22.04/git、Root:Ubuntu:22.04/rootio-git Attributes: Fix available
最高第 3 名06:23 达到06:23 首次观测上榜14:39 观测离榜累计约8小时16分 - 05ECHO-49ac-ba0f-ce98 · Echo/gst-plugins-good1.0
Affected packages: Echo/gst-plugins-good1.0 Attributes: No fix available
最高第 1 名07:43 达到07:43 首次观测上榜14:55 观测离榜累计约7小时12分 - 06MINI-q765-q5mr-3rph · MinimOS/jupyterhub
Affected packages: MinimOS/jupyterhub Attributes: Fix available
最高第 1 名09:51 达到09:51 首次观测上榜15:59 观测离榜累计约6小时8分 - 07CLSA-2026-1786399295 · TuxCare security update for symfony/yaml (1 CVE)
TuxCare security update for symfony/yaml (1 CVE) Affected packages: TuxCare:Packagist/symfony/yaml Attributes: Fix available
最高第 2 名08:47 达到08:47 首次观测上榜14:39 观测离榜累计约5小时52分 - 08MINI-cjf5-whw9-c7p6 · MinimOS/grype
Affected packages: MinimOS/grype Attributes: Fix available
最高第 2 名09:51 达到09:51 首次观测上榜15:27 观测离榜累计约5小时36分 - 09JLSEC-2026-1242 · ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...
ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function... Affected packages: Julia/Ncurses_jll Attributes: Fix available、Severity - 7.8 (High)
最高第 1 名04:31 达到04:31 首次观测上榜09:51 观测离榜累计约5小时20分 - 10MGASA-2026-0328 · Updated openslide packages fix a security vulnerability
Updated openslide packages fix a security vulnerability Affected packages: Mageia:10/openslide Attributes: Fix available
最高第 1 名03:43 达到03:43 首次观测上榜09:03 观测离榜累计约5小时20分 - 11MGASA-2026-0329 · Updated php8.4 packages fix security vulnerabilities
Updated php8.4 packages fix security vulnerabilities Affected packages: Mageia:10/php8.4 Attributes: Fix available
最高第 2 名03:43 达到03:43 首次观测上榜09:03 观测离榜累计约5小时20分 - 12MINI-fhw2-j3m2-wf8j · MinimOS/grype
Affected packages: MinimOS/grype Attributes: Fix available
最高第 3 名09:51 达到09:51 首次观测上榜15:11 观测离榜累计约5小时20分 - 13MGASA-2026-0330 · Updated php8.5 packages fix security vulnerabilities
Updated php8.5 packages fix security vulnerabilities Affected packages: Mageia:10/php8.5 Attributes: Fix available
最高第 3 名03:43 达到03:43 首次观测上榜08:47 观测离榜累计约5小时4分 - 14MGASA-2026-0331 · Updated bind packages fix security vulnerabilities
Updated bind packages fix security vulnerabilities Affected packages: Mageia:10/bind Attributes: Fix available
最高第 4 名03:43 达到03:43 首次观测上榜08:47 观测离榜累计约5小时4分 - 15MAL-2026-13709 · Malicious code in neutrl-contracts (PyPI)
Malicious code in neutrl-contracts (PyPI) Affected packages: PyPI/neutrl-contracts Attributes: No fix available
最高第 3 名04:47 达到04:47 首次观测上榜09:51 观测离榜累计约5小时4分 - 16MAL-2026-13710 · Malicious code in neutrl-core (PyPI)
Malicious code in neutrl-core (PyPI) Affected packages: PyPI/neutrl-core Attributes: No fix available
最高第 4 名04:47 达到04:47 首次观测上榜09:51 观测离榜累计约5小时4分 - 17MAL-2026-13711 · Malicious code in plp-contract (PyPI)
Malicious code in plp-contract (PyPI) Affected packages: PyPI/plp-contract Attributes: No fix available
最高第 2 名04:47 达到04:47 首次观测上榜09:51 观测离榜累计约5小时4分 - 18MINI-4979-x2qq-c9gv · MinimOS/acapy-agent-1.3
Affected packages: MinimOS/acapy-agent-1.3 Attributes: Fix available
最高第 6 名09:51 达到09:51 首次观测上榜14:55 观测离榜累计约5小时4分 - 19MINI-7v6w-3m6j-wm5f · MinimOS/acapy-agent-1.3
Affected packages: MinimOS/acapy-agent-1.3 Attributes: Fix available
最高第 7 名09:51 达到09:51 首次观测上榜14:55 观测离榜累计约5小时4分 - 20MINI-mj9v-2f47-6fmj · MinimOS/buildpacks-lifecycle-0.21
Affected packages: MinimOS/buildpacks-lifecycle-0.21 Attributes: Fix available
最高第 4 名09:51 达到09:51 首次观测上榜14:55 观测离榜累计约5小时4分 - 21MINI-q4w3-6v5j-f2vm · MinimOS/acapy-agent-1.3
Affected packages: MinimOS/acapy-agent-1.3 Attributes: Fix available
最高第 8 名09:51 达到09:51 首次观测上榜14:55 观测离榜累计约5小时4分 - 22MINI-xfwp-8vrx-hxmj · MinimOS/buildpacks-lifecycle-0.21
Affected packages: MinimOS/buildpacks-lifecycle-0.21 Attributes: Fix available
最高第 5 名09:51 达到09:51 首次观测上榜14:55 观测离榜累计约5小时4分 - 23MINI-72qj-gw53-x7qf · MinimOS/npm
Affected packages: MinimOS/npm Attributes: Fix available
最高第 5 名04:15 达到04:15 首次观测上榜08:47 观测离榜累计约4小时32分 - 24MINI-86mc-vv77-v6f2 · MinimOS/npm
Affected packages: MinimOS/npm Attributes: Fix available
最高第 6 名04:15 达到04:15 首次观测上榜08:47 观测离榜累计约4小时32分 - 25ROOT-OS-UBUNTU-2204-CVE-2025-68972 · CVE-2025-68972 in gnupg2 - Patched by Root
CVE-2025-68972 in gnupg2 - Patched by Root Affected packages: Root:Ubuntu:22.04/gnupg2、Root:Ubuntu:22.04/rootio-gnupg2 Attributes: Fix available、Severity - 5.9 (Medium)
最高第 5 名06:23 达到06:23 首次观测上榜10:55 观测离榜累计约4小时32分 - 26CGA-68v5-mcw9-mfv4 · Chainguard/open-webui
Affected packages: Chainguard/open-webui、Wolfi/open-webui Attributes: Fix available
最高第 9 名10:55 达到10:55 首次观测上榜14:55 观测离榜累计约4小时 - 27CGA-phcq-9cv7-px6j · Chainguard/open-webui
Affected packages: Chainguard/open-webui、Wolfi/open-webui Attributes: Fix available
最高第 10 名10:55 达到10:55 首次观测上榜14:55 观测离榜累计约4小时 - 28MINI-8jvw-wgv3-hp5j · MinimOS/npm
Affected packages: MinimOS/npm Attributes: Fix available
最高第 7 名04:15 达到04:15 首次观测上榜07:43 观测离榜累计约3小时28分 - 29DEBIAN-CVE-2026-6791 · Debian:11/glibc
Affected packages: Debian:11/glibc、Debian:12/glibc、Debian:13/glibc、Debian:14/glibc Attributes: No fix available
最高第 2 名01:03 达到01:03 首次观测上榜04:15 观测离榜累计约3小时12分 - 30DEBIAN-CVE-2026-69184 · Debian:13/c-ares
Affected packages: Debian:13/c-ares、Debian:14/c-ares Attributes: Fix available
最高第 1 名01:03 达到01:03 首次观测上榜04:15 观测离榜累计约3小时12分 - 31DEBIAN-CVE-2026-69186 · Debian:13/c-ares
Affected packages: Debian:13/c-ares、Debian:14/c-ares Attributes: Fix available
最高第 3 名01:03 达到01:03 首次观测上榜04:15 观测离榜累计约3小时12分 - 32MAL-2026-13728 · Malicious code in dlmm (PyPI)
Malicious code in dlmm (PyPI) Affected packages: PyPI/dlmm Attributes: No fix available
最高第 1 名14:07 达到14:07 首次观测上榜17:03 观测离榜累计约2小时56分 - 33RHSA-2026:52951 · Red Hat Security Advisory: libgcrypt security update
Red Hat Security Advisory: libgcrypt security update Affected packages: Red Hat:enterprise_linux_eus:10.0/libgcrypt Attributes: Fix available、Severity - 7.5 (High)
最高第 5 名18:23 达到18:23 首次观测上榜21:03 观测离榜累计约2小时40分 - 34RHSA-2026:52978 · Red Hat Security Advisory: postgresql-jdbc security update
Red Hat Security Advisory: postgresql-jdbc security update Affected packages: Red Hat:rhel_e4s:8.8::appstream/postgresql-jdbc、Red Hat:rhel_e4s:8.8::appstream/postgresql-jdbc-javadoc、Red Hat:rhel_tus:8.8::appstream/postgresql-jdbc、Red Hat:rhel_tus:8.8::appstream/postgresql-jdbc-javadoc Attributes: Fix available、Severity - 7.5 (High)
最高第 3 名18:23 达到18:23 首次观测上榜21:03 观测离榜累计约2小时40分 - 35RHSA-2026:52990 · Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Affected packages: Red Hat:hummingbird:1/nodejs26、Red Hat:hummingbird:1/nodejs26-bin Attributes: Fix available、Severity - 7.5 (High)
最高第 4 名18:23 达到18:23 首次观测上榜21:03 观测离榜累计约2小时40分 - 36RHSA-2026:53298 · Red Hat Security Advisory: nodejs22 security update
Red Hat Security Advisory: nodejs22 security update Affected packages: Red Hat:enterprise_linux_eus:10.0/nodejs、Red Hat:enterprise_linux_eus:10.0/nodejs-debuginfo、Red Hat:enterprise_linux_eus:10.0/nodejs-devel、Red Hat:enterprise_linux_eus:10.0/nodejs-docs、Red Hat:enterprise_linux_eus:10.0/nodejs-full-i18n、... 6 more Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名18:23 达到18:23 首次观测上榜21:03 观测离榜累计约2小时40分 - 37RHSA-2026:53364 · Red Hat Security Advisory: resource-agents security update
Red Hat Security Advisory: resource-agents security update Affected packages: Red Hat:enterprise_linux:8::highavailability/resource-agents、Red Hat:enterprise_linux:8::highavailability/resource-agents-aliyun、Red Hat:enterprise_linux:8::highavailability/resource-agents-aliyun-debuginfo、Red Hat:enterprise_linux:8::highavailability/resource-agents-debuginfo、Red Hat:enterprise_linux:8::highavailability/resource-agents-debugsource、... 9 more Attributes: Fix available、Severity - 7.5 (High)
最高第 2 名18:23 达到18:23 首次观测上榜21:03 观测离榜累计约2小时40分 - 38MINI-4xgc-c5pf-hmfw · MinimOS/virt-exportserver-1.8
Affected packages: MinimOS/virt-exportserver-1.8 Attributes: Fix available
最高第 2 名15:59 达到15:59 首次观测上榜18:23 观测离榜累计约2小时24分 - 39MINI-hfh4-fwgv-55jv · MinimOS/vllm-cu130
Affected packages: MinimOS/vllm-cu130 Attributes: Fix available
最高第 1 名15:59 达到15:59 首次观测上榜18:23 观测离榜累计约2小时24分 - 40RLSA-2026:52674 · Moderate: libarchive security update
Moderate: libarchive security update Affected packages: Rocky Linux:9/libarchive Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名14:39 达到14:39 首次观测上榜17:03 观测离榜累计约2小时24分 - 41RLSA-2026:52761 · Moderate: kernel-rt security update
Moderate: kernel-rt security update Affected packages: Rocky Linux:8/kernel-rt Attributes: Fix available、Severity - 5.5 (Medium)
最高第 2 名14:39 达到14:39 首次观测上榜17:03 观测离榜累计约2小时24分 - 42RLSA-2026:52765 · Moderate: kernel security update
Moderate: kernel security update Affected packages: Rocky Linux:8/kernel Attributes: Fix available、Severity - 5.5 (Medium)
最高第 4 名14:39 达到14:39 首次观测上榜17:03 观测离榜累计约2小时24分 - 43RLSA-2026:52772 · Important: perl-DBI:1.641 security update
Important: perl-DBI:1.641 security update Affected packages: Rocky Linux:8/perl-DBI Attributes: Fix available、Severity - 8.8 (High)
最高第 3 名14:39 达到14:39 首次观测上榜17:03 观测离榜累计约2小时24分 - 44MINI-fqxg-8gx5-whgp · MinimOS/npm
Affected packages: MinimOS/npm Attributes: Fix available
最高第 8 名04:15 达到04:15 首次观测上榜06:23 观测离榜累计约2小时8分 - 45MINI-gg32-rcq9-h565 · MinimOS/npm
Affected packages: MinimOS/npm Attributes: Fix available
最高第 9 名04:15 达到04:15 首次观测上榜06:23 观测离榜累计约2小时8分 - 46MINI-jgq9-6562-9hrh · MinimOS/npm
Affected packages: MinimOS/npm Attributes: Fix available
最高第 10 名04:15 达到04:15 首次观测上榜06:23 观测离榜累计约2小时8分 - 47DEBIAN-CVE-2026-19349 · Debian:11/lemonldap-ng
Affected packages: Debian:11/lemonldap-ng、Debian:12/lemonldap-ng、Debian:13/lemonldap-ng、Debian:14/lemonldap-ng Attributes: No fix available
最高第 1 名16:15 达到16:15 首次观测上榜18:23 观测离榜累计约2小时8分 - 48RUSTSEC-2026-0252 · Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read)
Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read) Affected packages: crates.io/orx-split-vec Attributes: Fix available
最高第 1 名18:55 达到18:55 首次观测上榜21:03 观测离榜累计约2小时8分 - 49RHSA-2026:52930 · Red Hat Security Advisory: postgresql-jdbc security update
Red Hat Security Advisory: postgresql-jdbc security update Affected packages: Red Hat:rhel_eus:9.6::appstream/postgresql-jdbc Attributes: Fix available、Severity - 7.5 (High)
最高第 11 名18:23 达到18:23 首次观测上榜20:31 观测离榜累计约2小时8分 - 50RHSA-2026:52948 · Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update
Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update Affected packages: Red Hat:enterprise_linux:10.2/java-21-ibm-semeru-certified-jdk、Red Hat:enterprise_linux:10.2/java-21-ibm-semeru-certified-jdk-devel、Red Hat:enterprise_linux:10.2/java-21-ibm-semeru-certified-jdk-headless、Red Hat:enterprise_linux:10.2/java-21-ibm-semeru-certified-jdk-jmods、Red Hat:enterprise_linux:10.2/java-21-ibm-semeru-certified-jdk-src、... 2 more Attributes: Fix available、Severity - 7.5 (High)
最高第 9 名18:23 达到18:23 首次观测上榜20:31 观测离榜累计约2小时8分