OSV.dev · 实时热榜
- 01MINI-24v5-f78r-9mrh · MinimOS/vsphere-csi-syncer-3.6
Affected packages: MinimOS/vsphere-csi-syncer-3.6 Attributes: Fix available
最高第 1 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 02MINI-37jp-pr26-38p9 · MinimOS/vsphere-csi-syncer-3.6
Affected packages: MinimOS/vsphere-csi-syncer-3.6 Attributes: Fix available
最高第 2 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 03MINI-47hj-rcr5-xvhf · MinimOS/vsphere-csi-syncer-3.6
Affected packages: MinimOS/vsphere-csi-syncer-3.6 Attributes: Fix available
最高第 3 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 04MINI-69hq-mwg7-9wg5 · MinimOS/vsphere-csi-syncer-3.7
Affected packages: MinimOS/vsphere-csi-syncer-3.7 Attributes: Fix available
最高第 4 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 05MINI-6x6j-6423-9q36 · MinimOS/vsphere-csi-syncer-3.7
Affected packages: MinimOS/vsphere-csi-syncer-3.7 Attributes: Fix available
最高第 5 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 06MINI-7gqr-pm5c-xp9q · MinimOS/vsphere-csi-syncer-3.6
Affected packages: MinimOS/vsphere-csi-syncer-3.6 Attributes: Fix available
最高第 6 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 07MINI-7m28-rcv2-8r6j · MinimOS/vsphere-csi-syncer-3.7
Affected packages: MinimOS/vsphere-csi-syncer-3.7 Attributes: Fix available
最高第 7 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 08MINI-8g23-p53m-h8cj · MinimOS/vsphere-csi-syncer-3.7
Affected packages: MinimOS/vsphere-csi-syncer-3.7 Attributes: Fix available
最高第 8 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 09MINI-9wjj-3h3j-gcj5 · MinimOS/vsphere-csi-syncer-3.7
Affected packages: MinimOS/vsphere-csi-syncer-3.7 Attributes: Fix available
最高第 9 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 10MINI-cvq9-mghx-m33w · MinimOS/vsphere-csi-syncer-3.6
Affected packages: MinimOS/vsphere-csi-syncer-3.6 Attributes: Fix available
最高第 10 名10:35 达到10:35 首次观测上榜16:31 观测离榜累计约5小时57分 - 11GHSA-7236-3392-c5c6 · BuildKit: Custom frontend could bypass Seccomp/AppArmor
BuildKit: Custom frontend could bypass Seccomp/AppArmor Affected packages: Go/github.com/moby/buildkit Attributes: Fix available、Severity - 5.3 (Medium)
最高第 3 名04:43 达到04:43 首次观测上榜10:35 观测离榜累计约5小时52分 - 12GHSA-72x6-4j93-7w86 · BuildKit has a possible runtime DoS via unbounded group parsing
BuildKit has a possible runtime DoS via unbounded group parsing Affected packages: Go/github.com/moby/buildkit Attributes: Fix available、Severity - 2.3 (Low)
最高第 2 名04:43 达到04:43 首次观测上榜10:35 观测离榜累计约5小时52分 - 13GHSA-rxjr-6c9q-h67x · logto-tunnel serves files outside --experience-path via path traversal
logto-tunnel serves files outside --experience-path via path traversal Affected packages: npm/@logto/tunnel Attributes: Fix available、Severity - 8.7 (High)
最高第 1 名04:43 达到04:43 首次观测上榜10:35 观测离榜累计约5小时52分 - 14DEBIAN-CVE-2026-73638 · Debian:11/libimager-perl
Affected packages: Debian:11/libimager-perl、Debian:12/libimager-perl、Debian:13/libimager-perl、Debian:14/libimager-perl Attributes: No fix available
最高第 1 名05:15 达到05:15 首次观测上榜10:35 观测离榜累计约5小时20分 - 15MINI-fv73-857w-cg6f · MinimOS/vsphere-csi-syncer-3.6
Affected packages: MinimOS/vsphere-csi-syncer-3.6 Attributes: Fix available
最高第 11 名10:35 达到10:35 首次观测上榜15:54 观测离榜累计约5小时20分 - 16CGA-868m-x9vh-pvrg · Chainguard/exim-pgsql
Affected packages: Chainguard/exim-pgsql、Wolfi/exim-pgsql Attributes: Fix available
最高第 10 名05:31 达到05:31 首次观测上榜10:35 观测离榜累计约5小时4分 - 17CGA-9gjh-6538-q498 · Chainguard/exim-doc
Affected packages: Chainguard/exim-doc、Chainguard/exim-pgsql、Wolfi/exim-doc、Wolfi/exim-pgsql Attributes: Fix available
最高第 4 名05:31 达到05:31 首次观测上榜10:35 观测离榜累计约5小时4分 - 18CGA-fqw8-v5fq-67jr · Chainguard/exim-doc
Affected packages: Chainguard/exim-doc、Wolfi/exim-doc Attributes: Fix available
最高第 5 名05:31 达到05:31 首次观测上榜10:35 观测离榜累计约5小时4分 - 19CGA-j3wj-hf3p-w3xv · Chainguard/calico-apiserver-3.30
Affected packages: Chainguard/calico-apiserver-3.30、Chainguard/calico-apiserver-3.32、Chainguard/calico-apiserver-fips-3.31、Chainguard/calico-apiserver-fips-3.32、Chainguard/calico-app-policy-3.32、... 301 more Attributes: Fix available
最高第 3 名05:31 达到05:31 首次观测上榜10:35 观测离榜累计约5小时4分 - 20CGA-q94v-qm86-6j4q · Chainguard/exim-pgsql
Affected packages: Chainguard/exim-pgsql、Wolfi/exim-pgsql Attributes: Fix available
最高第 9 名05:31 达到05:31 首次观测上榜10:35 观测离榜累计约5小时4分 - 21MAL-2026-14306 · Malicious code in rc4-secure (PyPI)
Malicious code in rc4-secure (PyPI) Affected packages: PyPI/rc4-secure Attributes: No fix available
最高第 2 名05:31 达到05:31 首次观测上榜10:35 观测离榜累计约5小时4分 - 22GHSA-8mq9-5fw2-5rm4 · Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)
Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters) Affected packages: npm/next-tinacms-azure、npm/next-tinacms-cloudinary、npm/next-tinacms-dos、npm/next-tinacms-s3 Attributes: Fix available、Severity - 5.4 (Medium)
最高第 2 名06:03 达到06:03 首次观测上榜10:35 观测离榜累计约4小时32分 - 23GHSA-rgr9-r7mj-mf6x · Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root
Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root Affected packages: npm/@tinacms/cli Attributes: Fix available、Severity - 6.5 (Medium)
最高第 1 名06:03 达到06:03 首次观测上榜10:35 观测离榜累计约4小时32分 - 24MINI-jc8x-2qgg-r2pm · MinimOS/vsphere-csi-syncer-3.7
Affected packages: MinimOS/vsphere-csi-syncer-3.7 Attributes: Fix available
最高第 12 名10:35 达到10:35 首次观测上榜15:06 观测离榜累计约4小时32分 - 25MAL-2026-14315 · Malicious code in @httttt/mcp-demo (npm)
Malicious code in @httttt/mcp-demo (npm) Affected packages: npm/@httttt/mcp-demo Attributes: No fix available
最高第 1 名12:11 达到12:11 首次观测上榜16:31 观测离榜累计约4小时21分 - 26MAL-2026-14316 · Malicious code in expect-dotenv (npm)
Malicious code in expect-dotenv (npm) Affected packages: npm/expect-dotenv Attributes: No fix available
最高第 2 名12:11 达到12:11 首次观测上榜16:31 观测离榜累计约4小时21分 - 27MINI-pjfj-j9qv-38m8 · MinimOS/vsphere-csi-syncer-3.6
Affected packages: MinimOS/vsphere-csi-syncer-3.6 Attributes: Fix available
最高第 13 名10:35 达到10:35 首次观测上榜14:34 观测离榜累计约4小时 - 28MINI-pwhm-5cw4-3f2v · MinimOS/vsphere-csi-syncer-3.7
Affected packages: MinimOS/vsphere-csi-syncer-3.7 Attributes: Fix available
最高第 14 名10:35 达到10:35 首次观测上榜14:34 观测离榜累计约4小时 - 29ECHO-541c-d60f-becf · Echo/vim
Affected packages: Echo/vim Attributes: No fix available
最高第 4 名04:59 达到04:59 首次观测上榜08:42 观测离榜累计约3小时44分 - 30MAL-2026-14307 · Malicious code in express-route-engine (npm)
Malicious code in express-route-engine (npm) Affected packages: npm/express-route-engine Attributes: No fix available
最高第 1 名07:07 达到07:07 首次观测上榜10:35 观测离榜累计约3小时28分 - 31ECHO-1fcb-1955-3c69 · Echo/busybox
Affected packages: Echo/busybox Attributes: No fix available
最高第 1 名07:23 达到07:23 首次观测上榜10:35 观测离榜累计约3小时12分 - 32MAL-2026-14308 · Malicious code in libasync (PyPI)
Malicious code in libasync (PyPI) Affected packages: PyPI/libasync Attributes: No fix available
最高第 2 名07:23 达到07:23 首次观测上榜10:35 观测离榜累计约3小时12分 - 33MINI-rwhc-r5fm-rcf5 · MinimOS/percona-server-8.0
Affected packages: MinimOS/percona-server-8.0、MinimOS/percona-server-8.0-client、MinimOS/percona-server-8.0-dev、MinimOS/percona-server-8.0-doc、MinimOS/percona-server-8.0-shared Attributes: No fix available
最高第 1 名04:27 达到04:27 首次观测上榜07:23 观测离榜累计约2小时56分 - 34MINI-7qrr-wgpr-rpjx · MinimOS/grafana-12.3
Affected packages: MinimOS/grafana-12.3 Attributes: No fix available
最高第 2 名04:27 达到04:27 首次观测上榜07:07 观测离榜累计约2小时40分 - 35ECHO-38c1-1304-759b · Echo/expat
Affected packages: Echo/expat Attributes: No fix available
最高第 1 名15:54 达到15:54 首次观测上榜18:07 观测离榜累计约2小时13分 - 36RLSA-2026:55787 · Moderate: java-21-openjdk security update
Moderate: java-21-openjdk security update Affected packages: Rocky Linux:8/java-21-openjdk Attributes: Fix available、Severity - 6.8 (Medium)
最高第 1 名14:34 达到14:34 首次观测上榜16:31 观测离榜累计约1小时57分 - 37RLSA-2026:56966 · Moderate: gstreamer1-plugins-good security update
Moderate: gstreamer1-plugins-good security update Affected packages: Rocky Linux:8/gstreamer1-plugins-good Attributes: Fix available、Severity - 7.5 (High)
最高第 2 名14:34 达到14:34 首次观测上榜16:31 观测离榜累计约1小时57分 - 38RLSA-2026:56973 · Important: mysql:8.4 security, bug fix, and enhancement update
Important: mysql:8.4 security, bug fix, and enhancement update Affected packages: Rocky Linux:9/mecab、Rocky Linux:9/mecab-ipadic、Rocky Linux:9/perl-DBD-MySQL、Rocky Linux:9/rapidjson Attributes: Fix available、Severity - 8.4 (High)
最高第 1 名08:42 达到08:42 首次观测上榜10:35 观测离榜累计约1小时52分 - 39MINI-3rqh-899q-vwhf · MinimOS/weaviate-fips-1.35
Affected packages: MinimOS/weaviate-fips-1.35 Attributes: No fix available
最高第 3 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 40MINI-7gxr-g53c-p9rg · MinimOS/weaviate-fips-1.31
Affected packages: MinimOS/weaviate-fips-1.31 Attributes: No fix available
最高第 11 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 41MINI-7xmf-fvx8-x4w4 · MinimOS/weaviate-fips-1.33
Affected packages: MinimOS/weaviate-fips-1.33 Attributes: No fix available
最高第 7 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 42MINI-88fh-89x6-qc92 · MinimOS/weaviate-fips-1.32
Affected packages: MinimOS/weaviate-fips-1.32 Attributes: No fix available
最高第 9 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 43MINI-9gxp-xrj5-9pwh · MinimOS/weaviate-fips-1.33
Affected packages: MinimOS/weaviate-fips-1.33 Attributes: No fix available
最高第 8 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 44MINI-c4vr-6xwc-cx8g · MinimOS/weaviate-fips-1.34
Affected packages: MinimOS/weaviate-fips-1.34 Attributes: No fix available
最高第 5 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 45MINI-f445-28wm-7982 · MinimOS/weaviate-fips-1.31
Affected packages: MinimOS/weaviate-fips-1.31 Attributes: No fix available
最高第 12 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 46MINI-p7w2-7pqg-57f2 · MinimOS/weaviate-fips-1.36
Affected packages: MinimOS/weaviate-fips-1.36 Attributes: No fix available
最高第 1 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 47MINI-pc9j-q467-xx97 · MinimOS/weaviate-fips-1.34
Affected packages: MinimOS/weaviate-fips-1.34 Attributes: No fix available
最高第 6 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 48MINI-v6fm-4gx9-855h · MinimOS/weaviate-fips-1.32
Affected packages: MinimOS/weaviate-fips-1.32 Attributes: No fix available
最高第 10 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 49MINI-ww3r-cx53-rf6r · MinimOS/weaviate-fips-1.35
Affected packages: MinimOS/weaviate-fips-1.35 Attributes: No fix available
最高第 4 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分 - 50MINI-xqrq-fx3v-h5cg · MinimOS/weaviate-fips-1.36
Affected packages: MinimOS/weaviate-fips-1.36 Attributes: No fix available
最高第 2 名01:47 达到01:47 首次观测上榜03:39 观测离榜累计约1小时52分