
OSV.dev · 实时热榜
- 01MINI-2387-5pr4-4v6w · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 4 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 02MINI-27r3-32c9-5cpg · MinimOS/conductor-fips
Affected packages: MinimOS/conductor-fips Attributes: Fix available
最高第 5 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 03MINI-2h4x-vhjf-wh95 · MinimOS/conductor-fips
Affected packages: MinimOS/conductor-fips Attributes: Fix available
最高第 6 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 04MINI-2q9r-64g2-3j77 · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 7 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 05MINI-2v4x-29wp-8xhm · MinimOS/conductor-fips
Affected packages: MinimOS/conductor-fips Attributes: Fix available
最高第 8 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 06MINI-2vq3-v7hv-68p8 · MinimOS/conductor-fips
Affected packages: MinimOS/conductor-fips Attributes: Fix available
最高第 9 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 07MINI-3287-4p8f-5v53 · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 10 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 08MINI-34r3-78fq-9qc6 · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 11 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 09MINI-36jv-pmh5-j7h7 · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 12 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 10MINI-3983-5mpw-8rqr · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 13 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 11MINI-3ff7-m467-fmmg · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 14 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 12MINI-3rhg-9q7g-jcmr · MinimOS/conductor
Affected packages: MinimOS/conductor Attributes: Fix available
最高第 15 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 13MINI-44h3-c572-rx6j · MinimOS/conductor-fips
Affected packages: MinimOS/conductor-fips Attributes: Fix available
最高第 16 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 14MINI-hgg3-774m-c38r · MinimOS/langfuse-4
Affected packages: MinimOS/langfuse-4、MinimOS/langfuse-4-worker Attributes: Fix available
最高第 2 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 15MINI-r2g6-2626-p6j5 · MinimOS/podman
Affected packages: MinimOS/podman Attributes: Fix available
最高第 1 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 16MINI-wh9f-4p4p-vff7 · MinimOS/langfuse-4
Affected packages: MinimOS/langfuse-4、MinimOS/langfuse-4-worker Attributes: Fix available
最高第 3 名10:22 达到10:22 首次观测上榜14:06 观测离榜累计约3小时44分 - 17ROOT-OS-UBUNTU-2204-CVE-2013-7445 · CVE-2013-7445 in linux - Patched by Root
CVE-2013-7445 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 1 名06:54 达到06:54 首次观测上榜10:22 观测离榜累计约3小时28分 - 18ROOT-OS-UBUNTU-2204-CVE-2015-7837 · CVE-2015-7837 in linux - Patched by Root
CVE-2015-7837 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 2 名06:54 达到06:54 首次观测上榜10:22 观测离榜累计约3小时28分 - 19ROOT-OS-UBUNTU-2204-CVE-2015-8553 · CVE-2015-8553 in linux - Patched by Root
CVE-2015-8553 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 3 名06:54 达到06:54 首次观测上榜10:22 观测离榜累计约3小时28分 - 20ROOT-OS-UBUNTU-2204-CVE-2016-8660 · CVE-2016-8660 in linux - Patched by Root
CVE-2016-8660 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 4 名06:54 达到06:54 首次观测上榜10:22 观测离榜累计约3小时28分 - 21ROOT-OS-UBUNTU-2204-CVE-2017-0537 · CVE-2017-0537 in linux - Patched by Root
CVE-2017-0537 in linux - Patched by Root Affected packages: Root:Ubuntu:22.04/linux、Root:Ubuntu:22.04/rootio-linux Attributes: Fix available
最高第 5 名06:54 达到06:54 首次观测上榜10:22 观测离榜累计约3小时28分 - 22JLSEC-2026-1264 · GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file...
GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file... Affected packages: Julia/Gzip_jll Attributes: No fix available、Severity - 2.0 (Low)
最高第 2 名00:30 达到00:30 首次观测上榜03:58 观测离榜累计约3小时28分 - 23JLSEC-2026-1266 · Julia/opusfile_jll
Affected packages: Julia/opusfile_jll Attributes: No fix available、Severity - 7.8 (High)
最高第 1 名00:30 达到00:30 首次观测上榜03:58 观测离榜累计约3小时28分 - 24JLSEC-2026-1265 · GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by...
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by... Affected packages: Julia/Gzip_jll Attributes: No fix available、Severity - 6.9 (Medium)
最高第 3 名00:30 达到00:30 首次观测上榜03:42 观测离榜累计约3小时12分 - 25GHSA-49m4-vp58-wgc9 · MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`
MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install` Affected packages: PyPI/stata-mcp Attributes: Fix available、Severity - 8.4 (High)
最高第 1 名03:42 达到03:42 首次观测上榜06:54 观测离榜累计约3小时12分 - 26JLSEC-2026-1267 · A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function...
A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function... Affected packages: Julia/OpenJpeg_jll Attributes: No fix available、Severity - 1.9 (Low)
最高第 1 名00:47 达到00:47 首次观测上榜03:58 观测离榜累计约3小时12分 - 27GHSA-jwjp-4649-v8jp · SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing Affected packages: NuGet/SIPSorcery Attributes: Fix available、Severity - 7.5 (High)
最高第 2 名03:58 达到03:58 首次观测上榜06:54 观测离榜累计约2小时56分 - 28GHSA-pfvm-w89x-94jw · SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)
SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS) Affected packages: NuGet/SIPSorcery Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名03:58 达到03:58 首次观测上榜06:54 观测离榜累计约2小时56分 - 29DEBIAN-CVE-2026-12061 · Debian:11/nltk
Affected packages: Debian:11/nltk、Debian:12/nltk、Debian:13/nltk、Debian:14/nltk Attributes: No fix available
最高第 2 名01:02 达到01:02 首次观测上榜03:58 观测离榜累计约2小时56分 - 30DEBIAN-CVE-2026-12072 · Debian:11/nltk
Affected packages: Debian:11/nltk、Debian:12/nltk、Debian:13/nltk、Debian:14/nltk Attributes: No fix available
最高第 3 名01:02 达到01:02 首次观测上榜03:58 观测离榜累计约2小时56分 - 31DEBIAN-CVE-2026-12074 · Debian:11/nltk
Affected packages: Debian:11/nltk、Debian:12/nltk、Debian:13/nltk、Debian:14/nltk Attributes: No fix available
最高第 1 名01:02 达到01:02 首次观测上榜03:58 观测离榜累计约2小时56分 - 32GHSA-cxgv-hp74-jj7r · Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)
Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv) Affected packages: PyPI/ansible-jailexec Attributes: Fix available、Severity - 7.3 (High)
最高第 1 名07:42 达到07:42 首次观测上榜10:22 观测离榜累计约2小时40分 - 33JLSEC-2026-1268 · Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list
Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list Affected packages: Julia/capnproto_jll Attributes: No fix available、Severity - 5.4 (Medium)
最高第 1 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 34JLSEC-2026-1269 · Julia/capnproto_jll
Affected packages: Julia/capnproto_jll Attributes: No fix available、Severity - 6.3 (Medium)
最高第 2 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 35JLSEC-2026-1270 · Julia/capnproto_jll
Affected packages: Julia/capnproto_jll Attributes: No fix available、Severity - 6.3 (Medium)
最高第 3 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 36MINI-2h4w-q89c-rx66 · MinimOS/logstash-8.19
Affected packages: MinimOS/logstash-8.19、MinimOS/logstash-8.19-with-output-opensearch Attributes: Fix available
最高第 12 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 37MINI-34rr-v9pg-2945 · MinimOS/logstash-8.19
Affected packages: MinimOS/logstash-8.19、MinimOS/logstash-8.19-with-output-opensearch Attributes: Fix available
最高第 13 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 38MINI-52xr-h6rp-978v · MinimOS/logstash-8.19
Affected packages: MinimOS/logstash-8.19、MinimOS/logstash-8.19-with-output-opensearch Attributes: Fix available
最高第 14 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 39MINI-5958-2rw4-8rhp · MinimOS/signoz-fips
Affected packages: MinimOS/signoz-fips Attributes: Fix available
最高第 8 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 40MINI-86cc-3f2p-j7xw · MinimOS/signoz-fips
Affected packages: MinimOS/signoz-fips Attributes: Fix available
最高第 9 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 41MINI-8vrh-9fcp-2rf7 · MinimOS/tomcat-fips-11.0
Affected packages: MinimOS/tomcat-fips-11.0、MinimOS/tomcat-fips-11.0-base、MinimOS/tomcat-fips-11.0-openjdk-17-jdk、MinimOS/tomcat-fips-11.0-openjdk-17-jre、MinimOS/tomcat-fips-11.0-openjdk-21-jdk、... 3 more Attributes: Fix available
最高第 7 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 42MINI-hfgf-qj69-8rfg · MinimOS/signoz
Affected packages: MinimOS/signoz Attributes: Fix available
最高第 10 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 43MINI-jpf9-pv49-r33h · MinimOS/signoz
Affected packages: MinimOS/signoz Attributes: Fix available
最高第 11 名04:14 达到04:14 首次观测上榜06:54 观测离榜累计约2小时40分 - 44EEF-CVE-2026-67579 · Filter expression injection via forged keyset pagination cursor in Ash
Filter expression injection via forged keyset pagination cursor in Ash Affected packages: Hex/ash、github.com/ash-project/ash Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名04:31 达到04:31 首次观测上榜06:54 观测离榜累计约2小时24分 - 45MAL-2026-13916 · Malicious code in @years20/n8n-nodes-utils-helper-g (npm)
Malicious code in @years20/n8n-nodes-utils-helper-g (npm) Affected packages: npm/@years20/n8n-nodes-utils-helper-g Attributes: No fix available
最高第 4 名00:15 达到00:15 首次观测上榜02:23 观测离榜累计约2小时8分 - 46MAL-2026-13920 · Malicious code in bb-twl-k7x2 (npm)
Malicious code in bb-twl-k7x2 (npm) Affected packages: npm/bb-twl-k7x2 Attributes: No fix available
最高第 3 名00:15 达到00:15 首次观测上榜02:23 观测离榜累计约2小时8分 - 47MAL-2026-13922 · Malicious code in passkeys-react (npm)
Malicious code in passkeys-react (npm) Affected packages: npm/passkeys-react Attributes: No fix available
最高第 2 名00:15 达到00:15 首次观测上榜02:23 观测离榜累计约2小时8分 - 48MAL-2026-13923 · Malicious code in tailwind-form-templates (npm)
Malicious code in tailwind-form-templates (npm) Affected packages: npm/tailwind-form-templates Attributes: No fix available
最高第 1 名00:15 达到00:15 首次观测上榜02:23 观测离榜累计约2小时8分 - 49MINI-42rf-6f3j-w25w · MinimOS/apisix-ingress-controller-fips
Affected packages: MinimOS/apisix-ingress-controller-fips Attributes: Fix available
最高第 1 名15:59 达到15:59 首次观测上榜18:06 观测离榜累计约2小时8分 - 50MINI-7w27-2qrx-4w6j · MinimOS/apisix-ingress-controller-fips
Affected packages: MinimOS/apisix-ingress-controller-fips Attributes: Fix available
最高第 2 名15:59 达到15:59 首次观测上榜18:06 观测离榜累计约2小时8分


































































































