OSV.dev · 实时热榜
- 01UBUNTU-CVE-2026-75803 · Ubuntu:22.04:LTS/openssl
Affected packages: Ubuntu:22.04:LTS/openssl、Ubuntu:24.04:LTS/edk2、Ubuntu:24.04:LTS/openssl、Ubuntu:26.04:LTS/edk2、Ubuntu:26.04:LTS/openssl、... 7 more Attributes: No fix available
最高第 1 名00:00 达到当日首次采集时已在榜当日结束时仍在榜累计约23小时59分 - 02DEBIAN-CVE-2026-19542 · Debian:11/glibc
Affected packages: Debian:11/glibc、Debian:12/glibc、Debian:13/glibc、Debian:14/glibc Attributes: No fix available
最高第 2 名00:00 达到当日首次采集时已在榜13:43 观测离榜累计约13小时44分 - 03ECHO-4020-d607-ea47 · Echo/glibc
Affected packages: Echo/glibc Attributes: No fix available
最高第 2 名03:19 达到03:19 首次观测上榜16:23 观测离榜累计约13小时4分 - 04JLSEC-2026-1384 · Julia/HDF5_jll
Affected packages: Julia/HDF5_jll Attributes: Fix available、Severity - 5.5 (Medium)
最高第 2 名22:38 达到22:38 首次观测上榜23:10 观测离榜累计约32分钟 - 05MAL-2026-14383 · Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)
Malicious code in @sdgdfgdfhhhfd/multiviewr (npm) Affected packages: npm/@sdgdfgdfhhhfd/multiviewr Attributes: No fix available
最高第 2 名01:43 达到01:43 首次观测上榜13:43 观测离榜累计约12小时 - 06MAL-2026-14384 · Malicious code in mlflow-otel-instrumentor (PyPI)
Malicious code in mlflow-otel-instrumentor (PyPI) Affected packages: PyPI/mlflow-otel-instrumentor Attributes: No fix available
最高第 2 名02:15 达到02:15 首次观测上榜13:43 观测离榜累计约11小时28分 - 07MAL-2026-14387 · Malicious code in @opap/player-kyc-widget (npm)
Malicious code in @opap/player-kyc-widget (npm) Affected packages: npm/@opap/player-kyc-widget Attributes: No fix available
最高第 2 名04:23 达到04:23 首次观测上榜16:23 观测离榜累计约12小时 - 08MAL-2026-14388 · Malicious code in cryptgraphy (PyPI)
Malicious code in cryptgraphy (PyPI) Affected packages: PyPI/cryptgraphy Attributes: No fix available
最高第 2 名05:27 达到05:27 首次观测上榜16:23 观测离榜累计约10小时56分 - 09MAL-2026-14389 · Malicious code in envprovision (PyPI)
Malicious code in envprovision (PyPI) Affected packages: PyPI/envprovision Attributes: No fix available
最高第 2 名06:15 达到06:15 首次观测上榜16:23 观测离榜累计约10小时8分 - 10MAL-2026-14392 · Malicious code in message-compiler (npm)
Malicious code in message-compiler (npm) Affected packages: npm/message-compiler Attributes: No fix available
最高第 2 名13:43 达到13:43 首次观测上榜16:23 观测离榜累计约2小时40分 - 11MAL-2026-14401 · Malicious code in multyproccess (PyPI)
Malicious code in multyproccess (PyPI) Affected packages: PyPI/multyproccess Attributes: No fix available
最高第 2 名16:39 达到16:39 首次观测上榜18:15 观测离榜累计约1小时36分 - 12MAL-2026-14403 · Malicious code in react-emits (npm)
Malicious code in react-emits (npm) Affected packages: npm/react-emits Attributes: No fix available
最高第 2 名16:55 达到16:55 首次观测上榜18:15 观测离榜累计约1小时20分 - 13MAL-2026-14405 · Malicious code in create-json-client (npm)
Malicious code in create-json-client (npm) Affected packages: npm/create-json-client Attributes: No fix available
最高第 2 名21:50 达到21:50 首次观测上榜22:38 观测离榜累计约48分钟 - 14MAL-2026-14410 · Malicious code in @temptation.js/utils (npm)
Malicious code in @temptation.js/utils (npm) Affected packages: npm/@temptation.js/utils Attributes: No fix available
最高第 2 名22:06 达到22:06 首次观测上榜22:54 观测离榜累计约48分钟 - 15MAL-2026-14412 · Malicious code in @deepaksilaych/sess (npm)
Malicious code in @deepaksilaych/sess (npm) Affected packages: npm/@deepaksilaych/sess Attributes: No fix available
最高第 2 名23:42 达到23:42 首次观测上榜当日结束时仍在榜累计约16分钟 - 16MINI-4r4p-2v5h-frgv · MinimOS/corretto-fips-config-24
Affected packages: MinimOS/corretto-fips-config-24 Attributes: Fix available
最高第 2 名23:10 达到23:10 首次观测上榜当日结束时仍在榜累计约48分钟 - 17MINI-64pm-48xv-mj7m · MinimOS/corretto-fips-config-21
Affected packages: MinimOS/corretto-fips-config-21 Attributes: Fix available
最高第 2 名22:54 达到22:54 首次观测上榜23:42 观测离榜累计约48分钟 - 18MINI-frf8-659q-m3m6 · MinimOS/fqdn-controller
Affected packages: MinimOS/fqdn-controller Attributes: Fix available
最高第 2 名17:11 达到17:11 首次观测上榜18:31 观测离榜累计约1小时20分 - 19RHSA-2026:58710 · Red Hat Security Advisory: freerdp security update
Red Hat Security Advisory: freerdp security update Affected packages: Red Hat:rhel_e4s:9.4::appstream/freerdp、Red Hat:rhel_e4s:9.4::appstream/freerdp-debuginfo、Red Hat:rhel_e4s:9.4::appstream/freerdp-debugsource、Red Hat:rhel_e4s:9.4::appstream/freerdp-libs、Red Hat:rhel_e4s:9.4::appstream/freerdp-libs-debuginfo、... 2 more Attributes: Fix available、Severity - 7.5 (High)
最高第 2 名18:31 达到18:31 首次观测上榜20:39 观测离榜累计约2小时8分 - 20RHSA-2026:58822 · Red Hat Security Advisory: fence-agents security update
Red Hat Security Advisory: fence-agents security update Affected packages: Red Hat:rhel_e4s:8.8::appstream/fence-agents、Red Hat:rhel_e4s:8.8::appstream/fence-agents-aliyun-debuginfo、Red Hat:rhel_e4s:8.8::appstream/fence-agents-all、Red Hat:rhel_e4s:8.8::appstream/fence-agents-amt-ws、Red Hat:rhel_e4s:8.8::appstream/fence-agents-apc、... 110 more Attributes: Fix available、Severity - 7.5 (High)
最高第 2 名18:47 达到18:47 首次观测上榜20:39 观测离榜累计约1小时52分 - 21RLSA-2026:58561 · Important: python-urwid security update
Important: python-urwid security update Affected packages: Rocky Linux:10/python-urwid Attributes: Fix available、Severity - 8.1 (High)
最高第 2 名20:39 达到20:39 首次观测上榜22:06 观测离榜累计约1小时27分 - 22ROOT-APP-NUGET-CVE-2025-26646 · CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root
CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root Affected packages: Root:NuGet/Microsoft.Build.Tasks.Core、Root:NuGet/Rootio.Microsoft.Build.Tasks.Core Attributes: Fix available、Severity - 8.0 (High)
最高第 2 名18:15 达到18:15 首次观测上榜18:47 观测离榜累计约32分钟 - 23ROOT-OS-DEBIAN-13-CVE-2023-51589 · CVE-2023-51589 in bluez - Patched by Root
CVE-2023-51589 in bluez - Patched by Root Affected packages: Root:Debian:13/bluez、Root:Debian:13/rootio-bluez Attributes: Fix available、Severity - 5.7 (Medium)
最高第 2 名16:23 达到16:23 首次观测上榜18:15 观测离榜累计约1小时52分 - 24JLSEC-2026-1374 · Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK) Affected packages: Julia/Avro_jll Attributes: No fix available、Severity - 9.2 (Critical)
最高第 3 名22:06 达到22:06 首次观测上榜22:54 观测离榜累计约48分钟 - 25JLSEC-2026-1385 · Julia/HDF5_jll
Affected packages: Julia/HDF5_jll Attributes: Fix available、Severity - 4.0 (Medium)
最高第 3 名22:38 达到22:38 首次观测上榜23:10 观测离榜累计约32分钟 - 26MAL-2026-14382 · Malicious code in @sdgdfgdfhhhfd/chainvista (npm)
Malicious code in @sdgdfgdfhhhfd/chainvista (npm) Affected packages: npm/@sdgdfgdfhhhfd/chainvista Attributes: No fix available
最高第 3 名01:43 达到01:43 首次观测上榜13:43 观测离榜累计约12小时 - 27MAL-2026-14385 · Malicious code in hydration-dim-kit (npm)
Malicious code in hydration-dim-kit (npm) Affected packages: npm/hydration-dim-kit Attributes: No fix available
最高第 3 名02:31 达到02:31 首次观测上榜13:43 观测离榜累计约11小时12分 - 28MAL-2026-14393 · Malicious code in sm-admin (npm)
Malicious code in sm-admin (npm) Affected packages: npm/sm-admin Attributes: No fix available
最高第 3 名13:43 达到13:43 首次观测上榜16:23 观测离榜累计约2小时40分 - 29MAL-2026-14398 · Malicious code in sm-oauth (npm)
Malicious code in sm-oauth (npm) Affected packages: npm/sm-oauth Attributes: No fix available
最高第 3 名14:15 达到13:43 首次观测上榜16:23 观测离榜累计约2小时40分 - 30MAL-2026-14406 · Malicious code in dext-crate-check (npm)
Malicious code in dext-crate-check (npm) Affected packages: npm/dext-crate-check Attributes: No fix available
最高第 3 名21:50 达到21:50 首次观测上榜22:38 观测离榜累计约48分钟 - 31MAL-2026-14413 · Malicious code in livemcp (npm)
Malicious code in livemcp (npm) Affected packages: npm/livemcp Attributes: No fix available
最高第 3 名23:42 达到23:42 首次观测上榜当日结束时仍在榜累计约16分钟 - 32MINI-8gv3-hp78-44rm · MinimOS/corretto-fips-config-21
Affected packages: MinimOS/corretto-fips-config-21 Attributes: Fix available
最高第 3 名23:10 达到23:10 首次观测上榜当日结束时仍在榜累计约48分钟 - 33MINI-c954-5277-gh5j · MinimOS/corretto-fips-config-26
Affected packages: MinimOS/corretto-fips-config-26 Attributes: Fix available
最高第 3 名22:54 达到22:54 首次观测上榜23:42 观测离榜累计约48分钟 - 34MINI-qjw9-wpmj-257h · MinimOS/kiali
Affected packages: MinimOS/kiali Attributes: Fix available
最高第 3 名00:00 达到当日首次采集时已在榜13:43 观测离榜累计约13小时44分 - 35RHSA-2026:58711 · Red Hat Security Advisory: freerdp security update
Red Hat Security Advisory: freerdp security update Affected packages: Red Hat:enterprise_linux_eus:10.0/freerdp、Red Hat:enterprise_linux_eus:10.0/freerdp-debuginfo、Red Hat:enterprise_linux_eus:10.0/freerdp-debugsource、Red Hat:enterprise_linux_eus:10.0/freerdp-devel、Red Hat:enterprise_linux_eus:10.0/freerdp-libs、... 6 more Attributes: Fix available、Severity - 8.1 (High)
最高第 3 名18:31 达到18:31 首次观测上榜20:39 观测离榜累计约2小时8分 - 36RHSA-2026:58834 · Red Hat Security Advisory: resource-agents security update
Red Hat Security Advisory: resource-agents security update Affected packages: Red Hat:rhel_eus_long_life:8.6::highavailability/resource-agents、Red Hat:rhel_eus_long_life:8.6::highavailability/resource-agents-aliyun、Red Hat:rhel_eus_long_life:8.6::highavailability/resource-agents-aliyun-debuginfo、Red Hat:rhel_eus_long_life:8.6::highavailability/resource-agents-debuginfo、Red Hat:rhel_eus_long_life:8.6::highavailability/resource-agents-debugsource、... 2 more Attributes: Fix available、Severity - 7.5 (High)
最高第 3 名18:47 达到18:47 首次观测上榜20:39 观测离榜累计约1小时52分 - 37RLSA-2026:58571 · Moderate: qemu-kvm security, bug fix, and enhancement update
Moderate: qemu-kvm security, bug fix, and enhancement update Affected packages: Rocky Linux:10/qemu-kvm Attributes: Fix available、Severity - 6.7 (Medium)
最高第 3 名20:39 达到20:39 首次观测上榜22:06 观测离榜累计约1小时27分 - 38ROOT-APP-NUGET-CVE-2025-55247 · CVE-2025-55247 in Microsoft.Build.Tasks.Core - Patched by Root
CVE-2025-55247 in Microsoft.Build.Tasks.Core - Patched by Root Affected packages: Root:NuGet/Microsoft.Build.Tasks.Core、Root:NuGet/Microsoft.Build.Utilities.Core、Root:NuGet/Rootio.Microsoft.Build.Tasks.Core、Root:NuGet/Rootio.Microsoft.Build.Utilities.Core Attributes: Fix available、Severity - 7.3 (High)
最高第 3 名18:15 达到18:15 首次观测上榜18:47 观测离榜累计约32分钟 - 39ROOT-OS-DEBIAN-13-CVE-2023-51594 · CVE-2023-51594 in bluez - Patched by Root
CVE-2023-51594 in bluez - Patched by Root Affected packages: Root:Debian:13/bluez、Root:Debian:13/rootio-bluez Attributes: Fix available、Severity - 5.7 (Medium)
最高第 3 名16:23 达到16:23 首次观测上榜18:15 观测离榜累计约1小时52分 - 40BIT-python-min-2026-17084 · stringprep.map_table_b2() deviates from RFC 3454 Table B.2
stringprep.map_table_b2() deviates from RFC 3454 Table B.2 Affected packages: Bitnami/python-min Attributes: No fix available、Severity - 6.0 (Medium)
最高第 4 名18:15 达到18:15 首次观测上榜18:47 观测离榜累计约32分钟 - 41JLSEC-2026-1375 · Apache Avro Java SDK is Vulnerable to Code Injection
Apache Avro Java SDK is Vulnerable to Code Injection Affected packages: Julia/Avro_jll Attributes: No fix available、Severity - 6.9 (Medium)
最高第 4 名22:06 达到22:06 首次观测上榜22:54 观测离榜累计约48分钟 - 42JLSEC-2026-1386 · Julia/HDF5_jll
Affected packages: Julia/HDF5_jll Attributes: Fix available、Severity - 5.2 (Medium)
最高第 4 名22:38 达到22:38 首次观测上榜23:10 观测离榜累计约32分钟 - 43MAL-2026-14386 · Malicious code in svelte-dim-kit (npm)
Malicious code in svelte-dim-kit (npm) Affected packages: npm/svelte-dim-kit Attributes: No fix available
最高第 4 名02:31 达到02:31 首次观测上榜13:43 观测离榜累计约11小时12分 - 44MAL-2026-14390 · Malicious code in amundi-compare (npm)
Malicious code in amundi-compare (npm) Affected packages: npm/amundi-compare Attributes: No fix available
最高第 4 名14:15 达到13:43 首次观测上榜16:23 观测离榜累计约2小时40分 - 45MAL-2026-14394 · Malicious code in sm-apikey-model (npm)
Malicious code in sm-apikey-model (npm) Affected packages: npm/sm-apikey-model Attributes: No fix available
最高第 4 名13:43 达到13:43 首次观测上榜16:23 观测离榜累计约2小时40分 - 46MAL-2026-14402 · Malicious code in agentgui (npm)
Malicious code in agentgui (npm) Affected packages: npm/agentgui Attributes: No fix available
最高第 4 名16:55 达到16:55 首次观测上榜18:15 观测离榜累计约1小时20分 - 47MAL-2026-14407 · Malicious code in dext-crate-image (npm)
Malicious code in dext-crate-image (npm) Affected packages: npm/dext-crate-image Attributes: No fix available
最高第 4 名21:50 达到21:50 首次观测上榜22:38 观测离榜累计约48分钟 - 48MAL-2026-14414 · Malicious code in mcp-real-chrome (npm)
Malicious code in mcp-real-chrome (npm) Affected packages: npm/mcp-real-chrome Attributes: No fix available
最高第 4 名23:42 达到23:42 首次观测上榜当日结束时仍在榜累计约16分钟 - 49MINI-7pfc-fppm-j52j · MinimOS/corretto-fips-config-8
Affected packages: MinimOS/corretto-fips-config-8 Attributes: Fix available
最高第 4 名22:54 达到22:54 首次观测上榜23:42 观测离榜累计约48分钟 - 50MINI-qj4j-398g-g5r8 · MinimOS/corretto-fips-config-25
Affected packages: MinimOS/corretto-fips-config-25 Attributes: Fix available
最高第 4 名23:10 达到23:10 首次观测上榜当日结束时仍在榜累计约48分钟