Expand intel coverage and refresh monitoring

这个提交包含在:
hao
2026-03-18 14:18:09 -07:00
父节点 87008d1bd5
当前提交 00d828d090
修改 3658 个文件,包含 124245 行新增13073 行删除

查看文件

@@ -5,7 +5,7 @@ category: "frameworks"
advisory_mode: "core"
published_date: "2025-01-21T21:10:47Z"
updated_date: "2026-02-04T02:29:26.373390Z"
severity: "low"
severity: "medium"
exploit_status: "unknown"
source_confidence: "official"
verification_status: "verified-real"
@@ -51,7 +51,7 @@ primary_source: "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-
- Canonical ID: `undici--CVE-2025-22150`
- 系统: `undici`
- 严重度: `low`
- 严重度: `medium`
- 来源置信度: `official`
- 官方主源: https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975
- 影响版本: `introduced=4.5.0, fixed<5.28.5, introduced=6.0.0, fixed<6.21.1, introduced=7.0.0, fixed<7.2.3`
@@ -59,12 +59,12 @@ primary_source: "https://github.com/nodejs/undici/security/advisories/GHSA-c76h-
## 其他来源
- https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f
- https://nvd.nist.gov/vuln/detail/CVE-2025-22150
- https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0
- https://github.com/nodejs/undici/commit/c2d78cd19fe4f4c621424491e26ce299e65e934a
- https://github.com/nodejs/undici/commit/c3acc6050b781b827d80c86cbbab34f14458d385
- https://hackerone.com/reports/2913312
- https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f
- https://github.com/nodejs/undici
- https://github.com/nodejs/undici/blob/8b06b8250907d92fead664b3368f1d2aa27c1f35/lib/web/fetch/body.js#L113