检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-V7WG-CPWC-24M4 CVE-2022-21724 | pgjdbc Does Not Check Class Instantiation when providing Plugin Classes | 高危 | Mavenorg.postgresql:postgresql | 已审查 | 2022-02-02 08:04 | 2022-08-12 21:14 |
| GHSA-QH36-44JV-C8XJ CVE-2020-8562 | Potential proxy IP restriction bypass in Kubernetes |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 低危 |
Gok8s.io/kubernetes |
| 已审查 |
| 2022-02-02 08:01 |
| 2026-06-09 18:51 |
| GHSA-3WHX-QRJ5-HH2H CVE-2021-41571 | Improper Input Validation in Apache Pulsar | 中危 | Mavenorg.apache.pulsar:pulsar | 已审查 | 2022-02-02 08:01 | 2022-02-12 01:07 |
| GHSA-HHM3-48H2-597V CVE-2021-44451 | Insufficiently Protected Credentials in Apache Superset | 高危 | PyPIapache-superset | 已审查 | 2022-02-02 08:01 | 2024-11-19 00:26 |
| GHSA-FR6Q-JV7J-35G3 CVE-2022-0401 | Path Traversal in w-zip | 严重 | npmw-zip | 已审查 | 2022-02-02 08:01 | 2022-02-08 03:12 |
| GHSA-287R-574X-F4H4 CVE-2021-45416 | RosarioSIS XSS Vulnerability | 中危 | Packagistfrancoisjacquet/rosariosis | 已审查 | 2022-02-02 08:01 | 2023-07-12 08:23 |
| GHSA-HHH6-CM2M-3FHC CVE-2022-24196 | Allocation of Resources Without Limits or Throttling in iText | 中危 | Mavencom.itextpdf:itext7-core | 已审查 | 2022-02-02 08:01 | 2022-02-08 04:59 |
| GHSA-C32G-2MGR-CFQ7 CVE-2022-24197 | Out-of-bounds Write in iText | 中危 | Mavencom.itextpdf:itext7-core | 已审查 | 2022-02-02 08:01 | 2022-02-08 04:59 |
| GHSA-8C9H-4Q7G-FP7H CVE-2022-24198 | Out-of-bounds Read in iText | 中危 | Mavencom.itextpdf:itext7-core | 已审查 | 2022-02-02 08:01 | 2023-03-08 07:46 |
| GHSA-F768-8PVQ-MM6R CVE-2022-0414 | Dolibarr vulnerable to Improper Validation of Specified Quantity in Input | 中危 | Packagistdolibarr/dolibarr | 已审查 | 2022-02-02 06:01 | 2023-07-01 04:07 |
| GHSA-4MPJ-488R-VH6M CVE-2021-42767 | Neo4j Graph Database vulnerable to Path Traversal | 严重 | Mavenorg.neo4j.procedure:apoc | 已审查 | 2022-02-02 06:01 | 2022-07-23 00:35 |
| GHSA-MM6G-MMQ6-53FF CVE-2021-32842 | Path Traversal in SharpZipLib | 中危 | NuGetSharpZipLib | 已审查 | 2022-02-02 00:23 | 2022-02-09 03:44 |
| GHSA-2X7H-96H5-RQ84 CVE-2021-32841 | Path Traversal in SharpZipLib | 中危 | NuGetSharpZipLib | 已审查 | 2022-02-02 00:22 | 2022-02-09 03:44 |
| GHSA-M22M-H4RF-PWQ3 CVE-2021-32840 | Path Traversal in SharpZipLib | 高危 | NuGetSharpZipLib | 已审查 | 2022-02-02 00:22 | 2022-02-09 03:45 |
| GHSA-9FP7-4FJM-Q3MF CVE-2021-23760 | Prototype Pollution in keyget | 中危 | npmkeyget | 已审查 | 2022-02-01 08:51 | 2022-02-01 03:46 |
| GHSA-4M8H-H59M-M34J CVE-2021-23558 | Prototype Pollution in bmoor | 高危 | npmbmoor | 已审查 | 2022-02-01 08:50 | 2022-02-08 05:21 |
| GHSA-VWXP-9QMF-W299 CVE-2022-0394 | Cross-site Scripting in LiveHelperChat | 中危 | Packagistremdex/livehelperchat | 已审查 | 2022-02-01 08:49 | 2022-02-04 03:18 |
| GHSA-M358-G4RP-533R CVE-2022-24124 | SQL Injection in Casdoor | 高危 | Gogithub.com/casdoor/casdoor | 已审查 | 2022-02-01 08:49 | 2022-02-08 05:15 |
| GHSA-4W8P-X6G8-FV64 CVE-2022-0339 | Server-Side Request Forgery in calibreweb | 中危 | PyPIcalibreweb | 已审查 | 2022-02-01 08:48 | 2024-11-20 03:23 |
| GHSA-F7QW-5FGJ-247X | Cross-site Scripting and Open Redirect in plone.app.contenttypes | 中危 | PyPIplone.app.contenttypes | 已审查 | 2022-02-01 08:48 | 2022-02-01 03:08 |
| GHSA-RMR5-CPV2-VGJF CVE-2021-43859 | Denial of Service by injecting highly recursive collections or maps in XStream | 高危 | Mavencom.thoughtworks.xstream:xstream | 已审查 | 2022-02-01 08:48 | 2025-11-05 00:34 |
| GHSA-WFJW-W6PV-8P7F CVE-2022-21659 | Observable Response Discrepancy in Flask-AppBuilder | 中危 | PyPIFlask-AppBuilder | 已审查 | 2022-02-01 08:47 | 2025-03-08 03:09 |
| GHSA-RRP4-2XX3-MV29 CVE-2022-21687 | Command injection in gh-ost | 中危 | Gogithub.com/github/gh-ost | 已审查 | 2022-02-01 08:47 | 2022-02-08 05:07 |
| GHSA-M6CJ-93V6-CVR5 CVE-2022-23596 | Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive | 高危 | Mavencom.github.junrar:junrar | 已审查 | 2022-02-01 08:47 | 2022-08-12 01:02 |
| GHSA-VVMR-8829-6WHX CVE-2022-23601 | CSRF token missing in Symfony | 高危 | Packagistsymfony/framework-bundle | 已审查 | 2022-02-01 08:46 | 2024-04-23 02:35 |