OSV.dev · 实时热榜
- 01BELL-CVE-2026-68452 · Alpaquita:23/linux-lts
Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: No fix available
最高第 1 名15:24 达到15:24 首次观测上榜16:12 观测离榜累计约48分钟 - 02DEBIAN-CVE-2026-50626 · Debian:11/qemu
Affected packages: Debian:11/qemu、Debian:12/qemu、Debian:13/qemu、Debian:14/qemu Attributes: No fix available
最高第 1 名14:04 达到14:04 首次观测上榜15:24 观测离榜累计约1小时20分 - 03DEBIAN-CVE-2026-73261 · Debian:14/mongoose
Affected packages: Debian:14/mongoose Attributes: No fix available
最高第 1 名17:00 达到17:00 首次观测上榜18:36 观测离榜累计约1小时36分 - 04ECHO-0929-81ea-1686 · Echo/gst-plugins-good1.0
Affected packages: Echo/gst-plugins-good1.0 Attributes: No fix available
最高第 1 名00:15 达到00:15 首次观测上榜01:35 观测离榜累计约1小时20分 - 05ECHO-1690-243f-9082 · Echo/postgresql-17
Affected packages: Echo/postgresql-17 Attributes: Fix available
最高第 1 名11:24 达到11:24 首次观测上榜15:24 观测离榜累计约4小时 - 06ECHO-16b4-af99-5729 · Echo/postgresql-15
Affected packages: Echo/postgresql-15 Attributes: No fix available
最高第 1 名11:08 达到11:08 首次观测上榜15:24 观测离榜累计约4小时16分 - 07ECHO-1b3e-064c-acb9 · Echo/qemu
Affected packages: Echo/qemu Attributes: No fix available
最高第 1 名19:24 达到19:24 首次观测上榜20:44 观测离榜累计约1小时20分 - 08ECHO-f6c7-844b-6a34 · Echo/perl
Affected packages: Echo/perl Attributes: No fix available
最高第 1 名21:48 达到21:48 首次观测上榜22:20 观测离榜累计约32分钟 - 09GHSA-29rf-f4vv-pvq6 · Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts
Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts Affected packages: Go/github.com/authorizerdev/authorizer Attributes: Fix available、Severity - 8.7 (High)
最高第 1 名23:56 达到23:56 首次观测上榜当日结束时仍在榜累计约0分钟 - 10JLSEC-2026-1319 · sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ... Affected packages: Julia/OpenSSH_jll Attributes: Fix available、Severity - 5.4 (Medium)
最高第 1 名16:12 达到16:12 首次观测上榜18:20 观测离榜累计约2小时8分 - 11MAL-2026-13934 · Malicious code in ai-analyzer (npm)
Malicious code in ai-analyzer (npm) Affected packages: npm/ai-analyzer Attributes: No fix available
最高第 1 名00:00 达到当日首次采集时已在榜00:15 观测离榜累计约15分钟 - 12MAL-2026-13941 · Malicious code in @solana-js/web3 (npm)
Malicious code in @solana-js/web3 (npm) Affected packages: npm/@solana-js/web3 Attributes: No fix available
最高第 1 名01:35 达到01:35 首次观测上榜06:04 观测离榜累计约4小时30分 - 13MAL-2026-14019 · Malicious code in fr-ito-web-react (npm)
Malicious code in fr-ito-web-react (npm) Affected packages: npm/fr-ito-web-react Attributes: No fix available
最高第 1 名15:56 达到15:56 首次观测上榜16:12 观测离榜累计约16分钟 - 14MAL-2026-14039 · Malicious code in @cdnshell/loader (npm)
Malicious code in @cdnshell/loader (npm) Affected packages: npm/@cdnshell/loader Attributes: No fix available
最高第 1 名23:40 达到23:40 首次观测上榜23:56 观测离榜累计约16分钟 - 15MGASA-2026-0332 · Updated roundcubemail package fixes security vulnerabilities
Updated roundcubemail package fixes security vulnerabilities Affected packages: Mageia:9/roundcubemail Attributes: Fix available
最高第 1 名00:47 达到00:47 首次观测上榜01:35 观测离榜累计约48分钟 - 16MGASA-2026-0335 · Updated dhcpcd packages fix security vulnerabilities
Updated dhcpcd packages fix security vulnerabilities Affected packages: Mageia:10/dhcpcd Attributes: Fix available
最高第 1 名06:04 达到06:04 首次观测上榜09:00 观测离榜累计约2小时55分 - 17MINI-2rq7-xgxw-g5rf · MinimOS/argocd-image-updater-fips-1
Affected packages: MinimOS/argocd-image-updater-fips-1 Attributes: No fix available
最高第 1 名22:36 达到22:36 首次观测上榜22:52 观测离榜累计约16分钟 - 18MINI-395g-hch6-9v52 · MinimOS/cert-manager-1.17
Affected packages: MinimOS/cert-manager-1.17、MinimOS/cert-manager-acmesolver-1.17、MinimOS/cert-manager-cainjector-1.17、MinimOS/cert-manager-controller-1.17、MinimOS/cert-manager-startupapicheck-1.17、... 1 more Attributes: No fix available
最高第 1 名23:08 达到23:08 首次观测上榜23:56 观测离榜累计约48分钟 - 19MINI-3qrj-cp57-qjfc · MinimOS/cert-manager-acmesolver-fips-1.17
Affected packages: MinimOS/cert-manager-acmesolver-fips-1.17、MinimOS/cert-manager-cainjector-fips-1.17、MinimOS/cert-manager-controller-fips-1.17、MinimOS/cert-manager-fips-1.17、MinimOS/cert-manager-startupapicheck-fips-1.17、... 1 more Attributes: No fix available
最高第 1 名23:24 达到23:24 首次观测上榜23:56 观测离榜累计约32分钟 - 20MINI-crj4-792v-p42j · MinimOS/semgrep
Affected packages: MinimOS/semgrep Attributes: Fix available
最高第 1 名09:48 达到09:48 首次观测上榜11:08 观测离榜累计约1小时20分 - 21MINI-f4fp-j38c-jjm5 · MinimOS/buildpacks-image-labels-4.12.2
Affected packages: MinimOS/buildpacks-image-labels-4.12.2 Attributes: No fix available
最高第 1 名22:52 达到22:52 首次观测上榜23:08 观测离榜累计约16分钟 - 22MINI-m7hg-3jx5-fwgc · MinimOS/airflow-2
Affected packages: MinimOS/airflow-2 Attributes: No fix available
最高第 1 名22:20 达到22:20 首次观测上榜22:36 观测离榜累计约16分钟 - 23RHSA-2026:54757 · Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory Affected packages: Red Hat:openstack:16.2::el8/collectd-sensubility、Red Hat:openstack:16.2::el8/collectd-sensubility-debuginfo、Red Hat:openstack:16.2::el8/erlang、Red Hat:openstack:16.2::el8/erlang-asn1、Red Hat:openstack:16.2::el8/erlang-asn1-debuginfo、... 52 more Attributes: Fix available、Severity - 9.1 (Critical)
最高第 1 名18:36 达到18:36 首次观测上榜20:44 观测离榜累计约2小时8分 - 24RLSA-2026:48170 · Low: php security, bug fix, and enhancement update
Low: php security, bug fix, and enhancement update Affected packages: Rocky Linux:10/php Attributes: Fix available、Severity - 5.6 (Medium)
最高第 1 名08:44 达到08:44 首次观测上榜11:08 观测离榜累计约2小时24分 - 25RLSA-2026:54485 · Important: freerdp security update
Important: freerdp security update Affected packages: Rocky Linux:8/freerdp Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名14:36 达到14:36 首次观测上榜15:24 观测离榜累计约48分钟 - 26RLSA-2026:54512 · Moderate: gnome-remote-desktop security update
Moderate: gnome-remote-desktop security update Affected packages: Rocky Linux:10/gnome-remote-desktop Attributes: Fix available、Severity - 7.5 (High)
最高第 1 名20:44 达到20:44 首次观测上榜22:20 观测离榜累计约1小时36分 - 27ROOT-APP-MAVEN-CVE-2025-11143 · CVE-2025-11143 in org.eclipse.jetty:jetty-http - Patched by Root
CVE-2025-11143 in org.eclipse.jetty:jetty-http - Patched by Root Affected packages: Root:Maven/io.root.org.eclipse.jetty:jetty-http、Root:Maven/org.eclipse.jetty:jetty-http Attributes: Fix available、Severity - 3.7 (Low)
最高第 1 名07:24 达到07:24 首次观测上榜09:48 观测离榜累计约2小时24分 - 28ROOT-OS-DEBIAN-13-CVE-2021-31879 · CVE-2021-31879 in wget - Patched by Root
CVE-2021-31879 in wget - Patched by Root Affected packages: Root:Debian:13/rootio-wget、Root:Debian:13/wget Attributes: Fix available
最高第 1 名18:20 达到18:20 首次观测上榜18:36 观测离榜累计约16分钟 - 29BELL-CVE-2026-68451 · Alpaquita:23/linux-lts
Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: No fix available
最高第 2 名15:24 达到15:24 首次观测上榜16:12 观测离榜累计约48分钟 - 30DEBIAN-CVE-2026-66021 · Debian:11/qemu
Affected packages: Debian:11/qemu、Debian:12/qemu、Debian:13/qemu、Debian:14/qemu Attributes: No fix available
最高第 2 名14:04 达到14:04 首次观测上榜15:24 观测离榜累计约1小时20分 - 31DEBIAN-CVE-2026-73252 · Debian:14/mongoose
Affected packages: Debian:14/mongoose Attributes: No fix available
最高第 2 名17:00 达到17:00 首次观测上榜18:20 观测离榜累计约1小时20分 - 32ECHO-1137-4f23-2f4e · Echo/postgresql-17
Affected packages: Echo/postgresql-17 Attributes: Fix available
最高第 2 名11:24 达到11:24 首次观测上榜15:24 观测离榜累计约4小时 - 33ECHO-2dca-2bed-f16d · Echo/qemu
Affected packages: Echo/qemu Attributes: No fix available
最高第 2 名19:24 达到19:24 首次观测上榜20:44 观测离榜累计约1小时20分 - 34ECHO-3f3c-1720-1cf2 · Echo/postgresql-15
Affected packages: Echo/postgresql-15 Attributes: No fix available
最高第 2 名11:08 达到11:08 首次观测上榜15:24 观测离榜累计约4小时16分 - 35ECHO-a321-5a7e-9f85 · Echo/gst-plugins-good1.0
Affected packages: Echo/gst-plugins-good1.0 Attributes: No fix available
最高第 2 名00:15 达到00:15 首次观测上榜01:35 观测离榜累计约1小时20分 - 36GO-2026-5972 · Enforce maximum recursion depth in encoding/asn1
Enforce maximum recursion depth in encoding/asn1 Affected packages: Go/stdlib Attributes: Fix available
最高第 2 名06:04 达到06:04 首次观测上榜08:44 观测离榜累计约2小时39分 - 37JLSEC-2026-1320 · scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when...
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when... Affected packages: Julia/OpenSSH_jll Attributes: Fix available、Severity - 5.4 (Medium)
最高第 2 名16:12 达到16:12 首次观测上榜18:20 观测离榜累计约2小时8分 - 38MAL-2026-13936 · Malicious code in datetime-format-xutil (npm)
Malicious code in datetime-format-xutil (npm) Affected packages: npm/datetime-format-xutil Attributes: No fix available
最高第 2 名00:00 达到当日首次采集时已在榜00:15 观测离榜累计约15分钟 - 39MAL-2026-13949 · Malicious code in external-process-live-log (npm)
Malicious code in external-process-live-log (npm) Affected packages: npm/external-process-live-log Attributes: No fix available
最高第 2 名01:35 达到01:35 首次观测上榜06:04 观测离榜累计约4小时30分 - 40MAL-2026-14016 · Malicious code in preinstall-hook-webhook-callback-demo (npm)
Malicious code in preinstall-hook-webhook-callback-demo (npm) Affected packages: npm/preinstall-hook-webhook-callback-demo Attributes: No fix available
最高第 2 名06:36 达到06:36 首次观测上榜08:44 观测离榜累计约2小时8分 - 41MAL-2026-14040 · Malicious code in @workoscalifant/sudoku-term (npm)
Malicious code in @workoscalifant/sudoku-term (npm) Affected packages: npm/@workoscalifant/sudoku-term Attributes: No fix available
最高第 2 名23:40 达到23:40 首次观测上榜23:56 观测离榜累计约16分钟 - 42MGASA-2026-0333 · Updated roundcubemail packages fix security vulnerabilities
Updated roundcubemail packages fix security vulnerabilities Affected packages: Mageia:10/roundcubemail Attributes: Fix available
最高第 2 名00:47 达到00:47 首次观测上榜01:35 观测离榜累计约48分钟 - 43MINI-34h9-3q2p-gv6v · MinimOS/argocd-image-updater-fips-1
Affected packages: MinimOS/argocd-image-updater-fips-1 Attributes: No fix available
最高第 2 名22:36 达到22:36 首次观测上榜22:52 观测离榜累计约16分钟 - 44MINI-3q4c-288x-55x5 · MinimOS/cilium-envoy-1.17
Affected packages: MinimOS/cilium-envoy-1.17 Attributes: No fix available
最高第 2 名23:56 达到23:56 首次观测上榜当日结束时仍在榜累计约0分钟 - 45MINI-4p4h-h87m-4gmx · MinimOS/access-log-exporter
Affected packages: MinimOS/access-log-exporter Attributes: Fix available
最高第 2 名22:20 达到22:20 首次观测上榜22:36 观测离榜累计约16分钟 - 46MINI-6wcq-6hfv-f2pw · MinimOS/cert-manager-acmesolver-fips-1.17
Affected packages: MinimOS/cert-manager-acmesolver-fips-1.17、MinimOS/cert-manager-cainjector-fips-1.17、MinimOS/cert-manager-controller-fips-1.17、MinimOS/cert-manager-fips-1.17、MinimOS/cert-manager-startupapicheck-fips-1.17、... 1 more Attributes: No fix available
最高第 2 名23:24 达到23:24 首次观测上榜23:56 观测离榜累计约32分钟 - 47MINI-94p7-xh26-gr63 · MinimOS/cert-manager-1.17
Affected packages: MinimOS/cert-manager-1.17、MinimOS/cert-manager-acmesolver-1.17、MinimOS/cert-manager-cainjector-1.17、MinimOS/cert-manager-controller-1.17、MinimOS/cert-manager-startupapicheck-1.17、... 1 more Attributes: No fix available
最高第 2 名23:08 达到23:08 首次观测上榜23:56 观测离榜累计约48分钟 - 48MINI-rg53-mf5m-5494 · MinimOS/buildpacks-image-labels-4.12.2
Affected packages: MinimOS/buildpacks-image-labels-4.12.2 Attributes: No fix available
最高第 2 名22:52 达到22:52 首次观测上榜23:08 观测离榜累计约16分钟 - 49MINI-xrc5-5846-wqqm · MinimOS/semgrep
Affected packages: MinimOS/semgrep Attributes: Fix available
最高第 2 名09:48 达到09:48 首次观测上榜11:08 观测离榜累计约1小时20分 - 50RHSA-2026:54667 · Red Hat Security Advisory: freerdp security update
Red Hat Security Advisory: freerdp security update Affected packages: Red Hat:enterprise_linux_eus:10.0/freerdp、Red Hat:enterprise_linux_eus:10.0/freerdp-debuginfo、Red Hat:enterprise_linux_eus:10.0/freerdp-debugsource、Red Hat:enterprise_linux_eus:10.0/freerdp-devel、Red Hat:enterprise_linux_eus:10.0/freerdp-libs、... 6 more Attributes: Fix available、Severity - 7.5 (High)
最高第 2 名18:36 达到18:36 首次观测上榜20:44 观测离榜累计约2小时8分