检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-WFVQ-P7QF-VV64 | Duplicate advisory: swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding 已撤回 | 高危 | SwiftURLgithub.com/apple/swift-nio-http2 | 已审查 | 2022-02-11 08:00 | 2023-06-20 00:54 |
当前筛选结果 35,190 条 · 时间按北京时间显示
| GHSA-PV7R-9VJG-G3F9 |
Duplicate advisory: swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length 已撤回 |
| 高危 |
SwiftURLgithub.com/apple/swift-nio-http2 |
| 已审查 |
| 2022-02-11 08:00 |
| 2023-06-20 01:00 |
| GHSA-GPGX-WHWH-R297 | Duplicate advisory: swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames 已撤回 | 高危 | SwiftURLgithub.com/apple/swift-nio-http2 | 已审查 | 2022-02-11 08:00 | 2023-06-20 00:50 |
| GHSA-75JP-87W2-C6X2 CVE-2021-44892 | ThinkPHP Remote Code Execution (RCE) vulnerability | 高危 | Packagisttopthink/framework | 已审查 | 2022-02-11 08:00 | 2024-04-25 07:02 |
| GHSA-R5CQ-9537-9RPF CVE-2021-28860 | Prototype Pollution in mixme | 严重 | npmmixme | 已审查 | 2022-02-11 07:52 | 2021-12-14 05:33 |
| GHSA-765H-QJXV-5F44 CVE-2021-23383 | Prototype Pollution in handlebars | 严重 | npmhandlebars | 已审查 | 2022-02-11 07:51 | 2023-11-30 04:30 |
| GHSA-M744-2JJ8-VPFV CVE-2021-26543 | Command injection in git-parse | 高危 | npmgit-parse | 已审查 | 2022-02-11 07:51 | 2022-02-11 07:51 |
| GHSA-6M4R-M3GC-H4R5 CVE-2020-7629 | OS Command Injection in install-package | 严重 | npminstall-package | 已审查 | 2022-02-11 07:48 | 2026-07-06 23:52 |
| GHSA-H9V8-RM3M-5H5F CVE-2020-7630 | OS Command Injection in git-add-remote | 严重 | npmgit-add-remote | 已审查 | 2022-02-11 07:47 | 2026-07-06 23:51 |
| GHSA-R773-PMW3-F4MR CVE-2021-23384 | Open Redirect in koa-remove-trailing-slashes | 中危 | npmkoa-remove-trailing-slashes | 已审查 | 2022-02-11 07:47 | 2023-09-06 07:11 |
| GHSA-CG57-P69R-3M7P CVE-2021-32622 | Improper file handling in matrix-react-sdk | 中危 | npmmatrix-react-sdk | 已审查 | 2022-02-11 07:46 | 2021-05-20 01:48 |
| GHSA-PFR3-87Q3-65RC CVE-2021-33041 | Cross-site Scripting in vmd | 中危 | npmvmd | 已审查 | 2022-02-11 07:46 | 2023-09-12 00:23 |
| GHSA-4XRW-WVMQ-8JMH CVE-2020-7627 | OS Command Injection in node-key-sender | 严重 | npmnode-key-sender | 已审查 | 2022-02-11 07:46 | 2026-07-06 23:51 |
| GHSA-6HR9-4692-FCH9 CVE-2020-7624 | Withdrawn Advisory: OS Command Injection in effect 已撤回 | 严重 | npmeffect | 已审查 | 2022-02-11 07:45 | 2024-06-05 02:24 |
| GHSA-3HQ6-RMV7-39VH CVE-2020-7625 | Injection in op-browser | 严重 | npmop-browser | 已审查 | 2022-02-11 07:45 | 2026-07-06 23:50 |
| GHSA-PF8J-VHG8-XMC3 CVE-2020-7626 | karma-mojo enables OS Command Injection | 严重 | npmkarma-mojo | 已审查 | 2022-02-11 07:42 | 2026-07-06 23:50 |
| GHSA-M6J2-V3GQ-45R5 CVE-2019-10062 | Cross-site Scripting in aurelia-framework | 中危 | npmaurelia-framework | 已审查 | 2022-02-11 07:42 | 2022-04-05 04:06 |
| GHSA-F2JW-PR2C-9X96 CVE-2021-29369 | Code injection in @rkesters/gnuplot | 严重 | npm@rkesters/gnuplot | 已审查 | 2022-02-11 07:41 | 2022-05-04 11:05 |
| GHSA-C5HM-XC74-PQRG CVE-2020-7623 | OS Command Injection in jscover | 严重 | npmjscover | 已审查 | 2022-02-11 07:37 | 2026-07-06 23:49 |
| GHSA-4V9W-PVWR-38H3 CVE-2020-7621 | OS Command Injection in strong-nginx-controller | 严重 | npmstrong-nginx-controller | 已审查 | 2022-02-11 07:36 | 2026-07-06 23:49 |
| GHSA-FR76-2WP8-FP92 CVE-2021-32820 | Insecure template handling in Express-handlebars | 高危 | npmexpress-handlebars | 已审查 | 2022-02-11 07:35 | 2023-09-06 07:08 |
| GHSA-C6RQ-RJC2-86V2 CVE-2017-18869 | Time-of-check Time-of-use (TOCTOU) Race Condition in chownr | 低危 | npmchownr | 已审查 | 2022-02-11 07:33 | 2021-05-13 04:23 |
| GHSA-H236-G5GH-VQ6C CVE-2019-19935 | DOM-based cross-site scripting in Froala Editor | 中危 | npmfroala-editor | 已审查 | 2022-02-11 07:32 | 2022-10-31 23:55 |
| GHSA-V88G-CGMW-V5XW CVE-2020-15366 | Prototype Pollution in Ajv | 中危 | npmajv | 已审查 | 2022-02-11 07:30 | 2024-06-22 05:33 |
| GHSA-4JWP-VFVF-657P CVE-2019-2391 | Deserialization of Untrusted Data in bson | 中危 | npmbson | 已审查 | 2022-02-11 07:30 | 2023-06-20 22:22 |