京东物流“京碳惠”亮相进博会，快递减碳可以当钱花

yun2025

京东物流“京碳惠”亮相进博会，快递减碳可以当钱花

shadow：依赖归档中的目录穿越名称可能被带入构建产物

11月7日公开的漏洞记录CVE-2026-75598涉及shadow。Gradle的Shadow插件会把应用及其依赖合并成JAR文件。在相应处理路径下，插件未独立验证依赖归档里各条目的名称，带有目录穿越成分的名字可能被保留到输出中。风险因此可以从第三方依赖传递给后续处理该构建产物的程序。版本清单标出的受影响范围包括低于9.6.0。

这条记录给出的CVSS 3.1基础评分为6.3分，分级为中危。按照评分列出的条件，利用者需要具备本地访问条件，不以事先取得系统权限为必要条件，并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为无、高、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。该分值采用十分制，衡量这条记录所描述情形下的技术严重性。

https://lightroom.adobe.com/shares/7ac5969560fb7f4ba1bb6f240e55b692
https://lightroom.adobe.com/shares/2310f93742a1344b963ee9f39bd12fef
https://lightroom.adobe.com/shares/e8b6c7169eccdc469bc093adb41bf6e0
https://lightroom.adobe.com/shares/6463eedef8cb694e96b89f3d3a238bf8
https://lightroom.adobe.com/shares/119eb4de22905a4981a9a87ba6c6f43a
https://lightroom.adobe.com/shares/48f895a0b767004da20d0da552d383e6
https://lightroom.adobe.com/shares/0c5fe60ce03bf94294d3de9b4765a88d
https://lightroom.adobe.com/shares/6bc96ce75ff1574d9b087a7b946484e1
https://lightroom.adobe.com/shares/e0f3911eda4de1478d8a66b8619a3d68
https://lightroom.adobe.com/shares/79341c59c9c965468b90c7cb69a83e45
https://lightroom.adobe.com/shares/a30b785da7f02a439d98bc7ed0d96588
https://lightroom.adobe.com/shares/0551ee00b426a945b9bc969e7cc47a8b
https://lightroom.adobe.com/shares/27584365601e8841986327f89dfddfc8
https://lightroom.adobe.com/shares/9016fc1901fedb4c8b97fd8556bc73b6
https://lightroom.adobe.com/shares/bcd38ec76c9610479ac1b7d7b9f477a3
https://lightroom.adobe.com/shares/4e736db0c00ce44fbdeac4fb2b5f9e42
https://lightroom.adobe.com/shares/bcebe6e1ead7af4a91e523aa91253d5c
https://lightroom.adobe.com/shares/c4aa70d0c6c9ef4aa0a6a5f401c9e70a
https://lightroom.adobe.com/shares/50eb27c8cd19444c855b0a20dde92cea
https://lightroom.adobe.com/shares/980e206455920144877204d6acc81cbe
https://lightroom.adobe.com/shares/3e94a9c70c8e2b4192998d94cf8a818b
https://lightroom.adobe.com/shares/9ad8a096c94aca489576d99fe68e6884
https://lightroom.adobe.com/shares/aee4922cafe41c40bc7a964837c51259
https://lightroom.adobe.com/shares/d5287bf914061c4682d7a1077bcdf082
https://lightroom.adobe.com/shares/20133fe733ca48458aa3673c1109ee9c
https://lightroom.adobe.com/shares/bccb8158348be749bc43400441bbeb6f
https://lightroom.adobe.com/shares/8ff04fc53a8aae439004d17898b755e5
https://lightroom.adobe.com/shares/aa25a15d1a0e054793a6cbcb04ee9bf4
https://lightroom.adobe.com/shares/04d2f63f60e66242b6b145871790ff50
https://lightroom.adobe.com/shares/956d58ffd96b1b4eac69c07a499b2804
https://lightroom.adobe.com/shares/32cd289c0ecd044da77b317400b7b641
https://lightroom.adobe.com/shares/87430ee3b38c144f8c661949ac919ddd
https://lightroom.adobe.com/shares/3379f6adff1e664480bf6f67f4c9207a
https://lightroom.adobe.com/shares/cbbe22797b50c64db68450a10102d195
https://lightroom.adobe.com/shares/58b489cdb7f92e439c0c70b5bab4f95b
https://lightroom.adobe.com/shares/8df6767b4235654aa4aa46ca2bd6154d
https://lightroom.adobe.com/shares/0bdbbd96f7f6064a8395e41d696fde62
https://lightroom.adobe.com/shares/fe730f2dae6bc44d8f856ec45f064e5b
https://lightroom.adobe.com/shares/f6ba020a859d00449a33410991de08c5
https://lightroom.adobe.com/shares/0ce3dd7c7a8efe4f8b1b3295ff73b984
https://lightroom.adobe.com/shares/e329be5cfa822f458a0f8ded9b7c6d31
https://lightroom.adobe.com/shares/c00fa1ffb7c36d4d8756cef50ea094fe
https://lightroom.adobe.com/shares/49b5bf533a16a842a9d31ddea23bd66e
https://lightroom.adobe.com/shares/213e4c9432957c4ca479f3886a88a832
https://lightroom.adobe.com/shares/0d3b30aa5a574642a6913e03cae9c345
https://lightroom.adobe.com/shares/9f561d5fbc0f784f8cc6d6138c32800c
https://lightroom.adobe.com/shares/0300735605414e41982bd9f1866a0d4a
https://lightroom.adobe.com/shares/eb32a95be98b724baca1791392fa924f
https://lightroom.adobe.com/shares/035c98baea196b41ac90168891a8585a
https://lightroom.adobe.com/shares/f7ca0d818bffa049a9a85241f0ebc2ab