OSV.dev · 实时热榜

Affected packages: Debian:11/keras Attributes: No fix available

Affected packages: Debian:11/icinga2、Debian:12/icinga2、Debian:13/icinga2、Debian:14/icinga2 Attributes: Fix available

Affected packages: Echo/expat Attributes: No fix available

Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR Affected packages: Hex/phoenix_live_view、github.com/phoenixframework/phoenix_live_view Attributes: Fix available、Severity - 2.1 (Low)

Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash Affected packages: Hex/ash、github.com/ash-project/ash Attributes: Fix available、Severity - 2.1 (Low)

Affected packages: Julia/XML2_jll Attributes: Fix available、Severity - 3.7 (Low)

Malicious code in kotanku (PyPI) Affected packages: PyPI/kotanku Attributes: No fix available

Malicious code in btcflx (PyPI) Affected packages: PyPI/btcflx Attributes: No fix available

Malicious code in @ssgw/icon (npm) Affected packages: npm/@ssgw/icon Attributes: No fix available

Malicious code in tokocrytodev (npm) Affected packages: npm/tokocrytodev Attributes: No fix available

Malicious code in @kuperka/chainguard-sdk (npm) Affected packages: npm/@kuperka/chainguard-sdk Attributes: No fix available

Malicious code in polymarket-stake-mathss (npm) Affected packages: npm/polymarket-stake-mathss Attributes: No fix available

Affected packages: MinimOS/kyverno-policy-reporter-plugin-fips Attributes: No fix available

Affected packages: MinimOS/chronograf-fips Attributes: Fix available

Affected packages: MinimOS/ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis Attributes: No fix available

Affected packages: MinimOS/python-3.14、MinimOS/python-3.14-base、MinimOS/python-3.14-base-dev、MinimOS/python-3.14-dev、MinimOS/python-3.14-doc、... 1 more Attributes: Fix available

Affected packages: MinimOS/python-3.10、MinimOS/python-3.10-base、MinimOS/python-3.10-base-dev、MinimOS/python-3.10-dev、MinimOS/python-3.10-doc Attributes: Fix available

Affected packages: github.com/python/cpython Attributes: Fix available

Red Hat Security Advisory: kernel-rt security update Affected packages: Red Hat:enterprise_linux:8::nfv/kernel-rt、Red Hat:enterprise_linux:8::nfv/kernel-rt-core、Red Hat:enterprise_linux:8::nfv/kernel-rt-debug、Red Hat:enterprise_linux:8::nfv/kernel-rt-debug-core、Red Hat:enterprise_linux:8::nfv/kernel-rt-debug-debuginfo、... 23 more Attributes: Fix available、Severity - 5.5 (Medium)

CVE-2025-69418 in openssl - Patched by Root Affected packages: Root:Alpine:3.17/openssl、Root:Alpine:3.17/rootio-openssl Attributes: Fix available、Severity - 4.0 (Medium)

CVE-2011-4116 in perl - Patched by Root Affected packages: Root:Debian:12/perl、Root:Debian:12/rootio-perl Attributes: Fix available

CVE-2026-32327 in apr-util - Patched by Root Affected packages: Root:Debian:13/apr-util、Root:Debian:13/rootio-apr-util Attributes: Fix available

Affected packages: Chainguard/jitsucom-jitsu-console、Chainguard/langfuse-2-worker、Wolfi/jitsucom-jitsu-console Attributes: Fix available

Affected packages: Debian:11/icinga2、Debian:12/icinga2、Debian:13/icinga2、Debian:14/icinga2 Attributes: Fix available

Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset Affected packages: Hex/ash、github.com/ash-project/ash Attributes: Fix available、Severity - 5.9 (Medium)

Affected packages: Julia/XML2_jll Attributes: Fix available、Severity - 5.9 (Medium)

Malicious code in btcflip (PyPI) Affected packages: PyPI/btcflip Attributes: No fix available

Malicious code in pytablute (PyPI) Affected packages: PyPI/pytablute Attributes: No fix available

Malicious code in @rblxts/services (npm) Affected packages: npm/@rblxts/services Attributes: No fix available

Malicious code in xerohub-discord-voice (npm) Affected packages: npm/xerohub-discord-voice Attributes: No fix available

Affected packages: MinimOS/chronograf-fips Attributes: Fix available

Affected packages: MinimOS/python-3.11、MinimOS/python-3.11-base、MinimOS/python-3.11-base-dev、MinimOS/python-3.11-dev、MinimOS/python-3.11-doc Attributes: Fix available

Affected packages: MinimOS/kyverno-policy-reporter-plugin-fips Attributes: No fix available

Affected packages: MinimOS/ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis Attributes: No fix available

Red Hat Security Advisory: libarchive security update Affected packages: Red Hat:enterprise_linux:9::appstream/bsdcat-debuginfo、Red Hat:enterprise_linux:9::appstream/bsdcpio-debuginfo、Red Hat:enterprise_linux:9::appstream/bsdtar、Red Hat:enterprise_linux:9::appstream/bsdtar-debuginfo、Red Hat:enterprise_linux:9::appstream/libarchive-debuginfo、... 8 more Attributes: Fix available、Severity - 7.5 (High)

CVE-2026-8932 in curl - Patched by Root Affected packages: Root:Alpine:3.15/curl、Root:Alpine:3.15/rootio-curl Attributes: Fix available

CVE-2026-28387 in openssl - Patched by Root Affected packages: Root:Alpine:3.17/openssl、Root:Alpine:3.17/rootio-openssl Attributes: Fix available、Severity - 8.1 (High)

CVE-2023-31486 in perl - Patched by Root Affected packages: Root:Debian:12/libhttp-tiny-perl、Root:Debian:12/perl、Root:Debian:12/rootio-libhttp-tiny-perl、Root:Debian:12/rootio-perl Attributes: Fix available

CVE-2025-49506 in apr-util - Patched by Root Affected packages: Root:Debian:13/apr-util、Root:Debian:13/rootio-apr-util Attributes: Fix available

Affected packages: Debian:11/icinga2、Debian:12/icinga2、Debian:13/icinga2、Debian:14/icinga2 Attributes: Fix available

Affected packages: Julia/XML2_jll Attributes: Fix available、Severity - 2.9 (Low)

Malicious code in kotoraka (PyPI) Affected packages: PyPI/kotoraka Attributes: No fix available

Malicious code in postcss-initial-provider (npm) Affected packages: npm/postcss-initial-provider Attributes: No fix available

Malicious code in neverthrow-js (npm) Affected packages: npm/neverthrow-js Attributes: No fix available

Affected packages: MinimOS/chronograf-fips Attributes: Fix available

Affected packages: MinimOS/python-3.12、MinimOS/python-3.12-base、MinimOS/python-3.12-base-dev、MinimOS/python-3.12-dev、MinimOS/python-3.12-doc、... 1 more Attributes: Fix available

Affected packages: MinimOS/kyverno-policy-reporter-plugin-fips Attributes: No fix available

Affected packages: MinimOS/ruby3.4-fluentd-kubernetes-daemonset-1.16-kinesis Attributes: No fix available

pypdf: Possible large memory usage for large /ToUnicode streams Affected packages: PyPI/pypdf Attributes: Fix available、Severity - 4.8 (Medium)

Red Hat Security Advisory: libarchive security update Affected packages: Red Hat:enterprise_linux:10.2/bsdcat-debuginfo、Red Hat:enterprise_linux:10.2/bsdcpio-debuginfo、Red Hat:enterprise_linux:10.2/bsdtar、Red Hat:enterprise_linux:10.2/bsdtar-debuginfo、Red Hat:enterprise_linux:10.2/bsdunzip-debuginfo、... 4 more Attributes: Fix available、Severity - 7.5 (High)