美股科技板块估值九年来首次低于大盘

yun2025

美股科技板块估值九年来首次低于大盘

shadow：依赖归档中的目录穿越名称可能被带入构建产物

11月7日公开的漏洞记录CVE-2026-75598涉及shadow。Gradle的Shadow插件会把应用及其依赖合并成JAR文件。在相应处理路径下，插件未独立验证依赖归档里各条目的名称，带有目录穿越成分的名字可能被保留到输出中。风险因此可以从第三方依赖传递给后续处理该构建产物的程序。版本清单标出的受影响范围包括低于9.6.0。

这条记录给出的CVSS 3.1基础评分为6.3分，分级为中危。按照评分列出的条件，利用者需要具备本地访问条件，不以事先取得系统权限为必要条件，并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为无、高、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。该分值采用十分制，衡量这条记录所描述情形下的技术严重性。

https://v.youku.com/v_show/id_XNjU3ODI3NzE2NA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTc4OA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NzE0MA==.html
https://v.youku.com/v_show/id_XNjU3ODI4MDA4OA==.html
https://v.youku.com/v_show/id_XNjU3ODI4MDA4NA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTc0NA==.html
https://v.youku.com/v_show/id_XNjU3ODI4MDA2OA==.html
https://v.youku.com/v_show/id_XNjU3ODI3ODQ2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2ODg5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODI4MDA0OA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTcyMA==.html
https://v.youku.com/v_show/id_XNjU3ODI4MDA0MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NzU3Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk2ODg2OA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTcyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NzU2NA==.html
https://v.youku.com/v_show/id_XNjU3ODI4MDAzMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NjE3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTcwOA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NDIzMg==.html
https://v.youku.com/v_show/id_XNjU3ODI3NDIwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NzUyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NjE1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTY1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NjEwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MTU4OA==.html
https://v.youku.com/v_show/id_XNjU3ODI3Njk2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NzQ3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTYwOA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NDExMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MzA3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTU1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NDQ4OA==.html
https://v.youku.com/v_show/id_XNjU3ODI3MTEzMg==.html
https://v.youku.com/v_show/id_XNjU3ODI3NDA4MA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTU0NA==.html
https://v.youku.com/v_show/id_XNjU3ODI3MjcyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NjAxNg==.html
https://v.youku.com/v_show/id_XNjU3ODI3MjY5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NzQwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI3MjY3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI3NDAyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MTQwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI3MjY0MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2Mjk1Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NDM4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NDM3Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MTM3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI3Mzk2NA==.html
https://v.youku.com/v_show/id_XNjU3ODI3NTQzMg==.html