检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-8VJ2-VXX3-667W CVE-2022-22817 | Arbitrary expression injection in Pillow | 严重 | PyPIpillow | 已审查 | 2022-01-13 04:07 | 2024-10-12 04:56 |
| GHSA-R478-C2PC-M7GX CVE-2022-22846 | dnslib has DNS reply verification issue |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 高危 |
PyPIdnslib |
| 已审查 |
| 2022-01-13 04:07 |
| 2024-09-19 04:06 |
| GHSA-8C5J-9R9F-C6W8 CVE-2021-45116 | Information disclosure in Django | 高危 | PyPIDjango | 已审查 | 2022-01-13 03:21 | 2024-09-20 20:22 |
| GHSA-JRH2-HC4R-7JWX CVE-2021-45452 | Directory-traversal in Django | 中危 | PyPIDjango | 已审查 | 2022-01-13 03:21 | 2024-09-20 20:19 |
| GHSA-53QW-Q765-4FWW CVE-2021-45115 | Denial-of-service in Django | 高危 | PyPIDjango | 已审查 | 2022-01-13 03:20 | 2024-09-21 00:04 |
| GHSA-9HG3-HMMF-C3GR CVE-2022-22821 | Path Traversal in nemo-toolkit | 中危 | PyPInemo-toolkit | 已审查 | 2022-01-11 08:00 | 2022-09-08 08:00 |
| GHSA-5RQG-JM4F-CQX7 | Infinite loop causing Denial of Service in colors | 高危 | npmcolors | 已审查 | 2022-01-11 01:29 | 2022-01-11 03:56 |
| GHSA-3QP6-M7HP-JRWF CVE-2021-36739 | Cross-site Scripting in Apache Pluto | 中危 | Mavenorg.apache.portals.pluto:pluto-portal | 已审查 | 2022-01-08 08:46 | 2025-05-23 05:40 |
| GHSA-X588-G38J-F672 CVE-2021-36737 | Cross-site Scripting in Apache Pluto | 中危 | Mavenorg.apache.portals.pluto:pluto-portal | 已审查 | 2022-01-08 08:46 | 2022-01-08 07:37 |
| GHSA-JG6J-JRXV-2HH9 CVE-2021-36738 | Cross-site Scripting in Apache Pluto | 中危 | Mavenorg.apache.portals.pluto:pluto-portal | 已审查 | 2022-01-08 08:46 | 2022-01-08 07:38 |
| GHSA-H3VQ-WV8J-36GW CVE-2020-27428 | Cross-site Scripting in Scratch-Svg-Renderer | 中危 | npmscratch-svg-renderer | 已审查 | 2022-01-08 08:44 | 2022-01-08 07:45 |
| GHSA-MGPF-HHGF-CXG4 CVE-2021-45457 | In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin. | 高危 | Mavenorg.apache.kylin:kylin | 已审查 | 2022-01-08 08:43 | 2022-07-14 02:50 |
| GHSA-9FJ5-JG6F-QG5R CVE-2021-45458 | Use of Hard-coded Credentials in Apache Kylin | 高危 | Mavenorg.apache.kylin:kylin | 已审查 | 2022-01-08 08:43 | 2023-07-22 03:24 |
| GHSA-WRX7-QGMJ-MF2Q CVE-2021-27738 | Server-Side Request Forgery in Apache Kylin | 中危 | Mavenorg.apache.kylin:kylin | 已审查 | 2022-01-08 08:43 | 2022-01-08 07:16 |
| GHSA-5429-PJWW-7675 CVE-2021-36774 | SQL Injection in Apache Kylin | 中危 | Mavenorg.apache.kylin:kylin | 已审查 | 2022-01-08 08:43 | 2023-08-09 04:44 |
| GHSA-Q656-G2X3-8CGH CVE-2021-31522 | Kylin can receive user input and load any class through Class.forName(...). | 中危 | Mavenorg.apache.kylin:kylin | 已审查 | 2022-01-08 08:43 | 2022-01-08 07:21 |
| GHSA-HW3M-8H25-8FRW CVE-2021-45456 | Command Injection in Apache Kylin | 中危 | Mavenorg.apache.kylin:kylin | 已审查 | 2022-01-08 08:42 | 2022-01-08 06:53 |
| GHSA-FQGW-6QJ5-8HMP CVE-2021-40111 | Infinite Loop in Apache James | 中危 | Mavenorg.apache.james:james-server | 已审查 | 2022-01-08 08:40 | 2022-01-08 02:33 |
| GHSA-84WG-RGP8-2HG4 CVE-2021-38542 | Command Injection in Apache James | 中危 | Mavenorg.apache.james:james-server | 已审查 | 2022-01-08 08:40 | 2022-09-22 03:38 |
| GHSA-R58X-WJG8-63M9 CVE-2021-40110 | Denial of Service in Apache James | 高危 | Mavenorg.apache.james:james-server | 已审查 | 2022-01-08 08:40 | 2024-05-15 14:30 |
| GHSA-868X-RG4C-CJQG CVE-2021-43045 | Allocation of Resources Without Limits or Throttling in Apache Avro | 高危 | NuGetApache.Avro | 已审查 | 2022-01-08 08:39 | 2023-09-27 04:26 |
| GHSA-XHW6-HJC9-679M CVE-2021-44878 | Pac4j token validation bypass if OpenID Connect provider supports none algorithm | 高危 | Mavenorg.pac4j:pac4j-oidc | 已审查 | 2022-01-08 08:36 | 2023-09-27 01:27 |
| GHSA-GHHM-XRWP-75M9 CVE-2021-4194 | bookstack is vulnerable to Improper Access Control | 中危 | Packagistssddanbrown/bookstack | 已审查 | 2022-01-08 08:34 | 2022-01-08 06:38 |
| GHSA-JR37-66PJ-36V7 CVE-2022-22109 | Cross-site Scripting in DayByDay CRM | 中危 | Packagistbottelet/flarepoint | 已审查 | 2022-01-08 08:32 | 2022-01-11 05:46 |
| GHSA-44GV-FGCJ-W546 CVE-2022-22107 | Missing Authorization in DayByDay CRM | 中危 | Packagistbottelet/flarepoint | 已审查 | 2022-01-08 08:31 | 2022-01-08 04:37 |