检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-J377-2X76-558H CVE-2021-36716 | Improper Input Validation in is-email | 高危 | npmis-email | 已审查 | 2021-12-11 01:25 | 2022-05-04 11:12 |
| GHSA-9X7M-9HPG-XXMW CVE-2021-25953 | Prototype Pollution in putil-merge |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 严重 |
npmputil-merge |
| 已审查 |
| 2021-12-11 01:24 |
| 2021-07-19 23:44 |
| GHSA-Q5WR-FVPQ-P67G CVE-2020-28248 | Integer Overflow in png-img | 高危 | npmpng-img | 已审查 | 2021-12-11 01:23 | 2021-07-27 02:09 |
| GHSA-HM82-QR45-H7MW CVE-2020-28269 | Prototype Pollution in field | 严重 | npmfield | 已审查 | 2021-12-11 01:22 | 2023-09-09 06:51 |
| GHSA-49VV-6Q7Q-W5CF | Duplicate Advisory: OS Command Injection in Strapi 已撤回 | 高危 | npmstrapi | 已审查 | 2021-12-11 01:22 | 2025-12-29 23:34 |
| GHSA-23FP-FMRV-F5PX CVE-2020-8123 | Uncontrolled Resource Consumption in strapi | 中危 | npmstrapi-admin | 已审查 | 2021-12-11 01:22 | 2023-11-28 05:11 |
| GHSA-3H68-WVV6-8R5H CVE-2020-1940 | Improper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak | 高危 | Mavenorg.apache.jackrabbit:oak-core | 已审查 | 2021-12-11 01:20 | 2021-07-29 02:09 |
| GHSA-V525-C3G5-CG9P CVE-2020-36282 | Unsafe Deserialization that can Result in Code Execution | 高危 | Mavencom.rabbitmq.jms:rabbitmq-jms | 已审查 | 2021-12-11 01:15 | 2021-03-16 07:45 |
| GHSA-JFH8-C2JP-5V3Q CVE-2021-44228 | Remote code injection in Log4j | 严重 | Mavencom.guicedee.services:log4j-core+4 | 已审查 | 2021-12-10 08:40 | 2025-10-23 03:13 |
| GHSA-VJ54-CJRX-X696 CVE-2020-11576 | Observable Discrepancy in Argo | 中危 | Gogithub.com/argoproj/argo-cd | 已审查 | 2021-12-10 03:59 | 2023-09-30 01:24 |
| GHSA-V39H-QM32-8GWQ CVE-2020-7616 | Improperly Controlled Modification of Dynamically-Determined Object Attributes in express-mock-middleware | 中危 | npmexpress-mock-middleware | 已审查 | 2021-12-10 03:57 | 2021-07-29 23:53 |
| GHSA-3P94-VJ97-FM4Q CVE-2020-7615 | OS Command Injection in fsa | 中危 | npmfsa | 已审查 | 2021-12-10 03:56 | 2021-05-26 00:28 |
| GHSA-4M6Q-RXHM-675W CVE-2020-7636 | OS Command Injection in adb-driver | 严重 | npmadb-driver | 已审查 | 2021-12-10 03:54 | 2021-07-29 07:08 |
| GHSA-3Q9X-W53P-JG53 CVE-2020-7634 | OS Command Injection in heroku-addonpool | 严重 | npmheroku-addonpool | 已审查 | 2021-12-10 03:52 | 2023-09-14 05:57 |
| GHSA-76QM-4F93-FG6F CVE-2015-9545 | Improper Input Validation in xdLocalStorage | 高危 | npmxdlocalstorage | 已审查 | 2021-12-10 03:30 | 2022-09-22 06:30 |
| GHSA-C6C4-JMQX-3R33 CVE-2020-11611 | Open Redirect in xdLocalStorage | 中危 | npmxdlocalstorage | 已审查 | 2021-12-10 03:30 | 2021-05-26 00:23 |
| GHSA-VRC7-6G8W-JH56 CVE-2015-9544 | Improper Input Validation in xdLocalStorage | 高危 | npmxdlocalstorage | 已审查 | 2021-12-10 03:29 | 2022-03-12 06:59 |
| GHSA-7Q9F-X6RM-QMXR CVE-2020-7635 | Command Injection in compass-compile | 严重 | npmcompass-compile | 已审查 | 2021-12-10 03:27 | 2022-02-25 02:19 |
| GHSA-XMC8-26Q4-QJHX CVE-2020-28491 | Denial of Service (DoS) in Jackson Dataformat CBOR | 高危 | Mavencom.fasterxml.jackson.dataformat:jackson-dataformat-cbor | 已审查 | 2021-12-10 03:17 | 2023-03-27 23:11 |
| GHSA-VFQX-33QM-G869 CVE-2020-36189 | Unsafe Deserialization in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2021-12-10 03:16 | 2023-09-15 00:04 |
| GHSA-R695-7VR9-JGC2 CVE-2020-36187 | Unsafe Deserialization in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2021-12-10 03:16 | 2022-02-09 05:37 |
| GHSA-F9XH-2QGP-CQ57 CVE-2020-36188 | Unsafe Deserialization in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2021-12-10 03:16 | 2023-09-15 00:03 |
| GHSA-9M6F-7XCQ-8VF8 CVE-2020-36183 | Unsafe Deserialization in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2021-12-10 03:16 | 2026-05-07 02:37 |
| GHSA-M6X4-97WX-4Q27 CVE-2020-36184 | Unsafe Deserialization in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2021-12-10 03:16 | 2022-02-09 05:38 |
| GHSA-8C4J-34R4-XR8G CVE-2020-36180 | Unsafe Deserialization in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2021-12-10 03:16 | 2023-09-15 00:13 |