检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-89Q5-MJ78-PW5W CVE-2021-23673 | Cross-site Scripting in pekeupload | 中危 | npmpekeupload | 已审查 | 2021-12-03 01:52 | 2021-11-29 22:53 |
| GHSA-6GWW-QPM6-MC2G CVE-2021-23718 | Server-Side Request Forgery in ssrf-agent |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
npmssrf-agent |
| 已审查 |
| 2021-12-03 01:51 |
| 2021-11-29 23:08 |
| GHSA-FF45-7PRW-58VJ CVE-2021-23732 | OS Command injection in docker-cli-js 已撤回 | 中危 | npmdocker-cli-js | 已审查 | 2021-12-03 01:51 | 2021-11-30 22:50 |
| GHSA-3M3H-V9HV-9J4H CVE-2021-25986 | Cross-site Scripting in django-wiki | 中危 | PyPIwiki | 已审查 | 2021-12-03 01:49 | 2024-11-20 02:27 |
| GHSA-CFQJ-9G2G-W7Q6 CVE-2021-40369 | Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation | 中危 | Mavenorg.apache.jspwiki:jspwiki-main | 已审查 | 2021-12-03 01:49 | 2022-08-11 22:51 |
| GHSA-WF5P-F5XR-C4JJ CVE-2021-44427 | SQL Injection in rosariosis | 严重 | Packagistfrancoisjacquet/rosariosis | 已审查 | 2021-12-03 01:48 | 2021-12-02 05:03 |
| GHSA-PFMW-VJ74-PH8G CVE-2021-43998 | HashiCorp Vault Incorrect Permission Assignment for Critical Resource | 严重 | Gogithub.com/hashicorp/vault | 已审查 | 2021-12-03 01:48 | 2022-08-11 07:48 |
| GHSA-WP4H-PVGW-5727 CVE-2019-0230 | Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts | 严重 | Mavenorg.apache.struts:struts2-core | 已审查 | 2021-12-02 22:50 | 2021-12-02 22:45 |
| GHSA-7RPC-9M88-CF9W CVE-2021-41243 | OS Command Injection Vulnerability and Potential Zip Slip Vulnerability in baserCMS | 严重 | Packagistbaserproject/basercms | 已审查 | 2021-12-02 02:29 | 2021-12-01 22:32 |
| GHSA-4X2F-54WR-4HJG CVE-2021-41279 | Potential Zip Slip Vulnerability in baserCMS | 高危 | Packagistbaserproject/basercms | 已审查 | 2021-12-02 02:29 | 2021-11-30 03:15 |
| GHSA-W7FJ-336R-VW49 CVE-2021-43776 | Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend | 高危 | npm@backstage/plugin-auth-backend | 已审查 | 2021-12-02 02:29 | 2021-12-01 22:35 |
| GHSA-2G8G-63J4-9W3R | RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend | 高危 | npm@backstage/plugin-scaffolder-backend | 已审查 | 2021-12-02 02:29 | 2021-11-30 03:39 |
| GHSA-F34M-X9PJ-62VQ CVE-2021-43785 | Cross-Site Scripting Vulnerability in @joeattardi/emoji-button | 高危 | npm@joeattardi/emoji-button | 已审查 | 2021-12-02 02:29 | 2021-12-01 22:34 |
| GHSA-MG3M-F475-28HV CVE-2021-43783 | Path Traversal in @backstage/plugin-scaffolder-backend | 高危 | npm@backstage/plugin-scaffolder-backend | 已审查 | 2021-12-02 02:28 | 2021-11-30 04:22 |
| GHSA-9JP8-CWWX-P64Q | XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext | 中危 | Packagistezsystems/ezplatform-admin-ui | 已审查 | 2021-12-02 02:28 | 2021-11-30 04:55 |
| GHSA-FXWM-RX68-P5VX | XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext | 中危 | Packagistezsystems/ezplatform-richtext | 已审查 | 2021-12-02 02:28 | 2021-11-30 04:55 |
| GHSA-Q54R-R9PR-W7QV CVE-2021-25987 | Hexo Vulnerable to XSS | 中危 | npmhexo | 已审查 | 2021-12-02 02:27 | 2023-09-14 03:55 |
| GHSA-JM6P-WFJG-XM7X CVE-2021-4026 | bookstack is vulnerable to Improper Access Control | 中危 | Packagistssddanbrown/bookstack | 已审查 | 2021-12-02 02:26 | 2021-12-02 23:29 |
| GHSA-945Q-CH46-PCHG CVE-2021-22095 | Deserialization of Untrusted Data in Spring AMQP | 中危 | Mavenorg.springframework.amqp:spring-amqp | 已审查 | 2021-12-01 08:00 | 2024-05-16 07:10 |
| GHSA-FWF6-RW69-HHJ4 CVE-2021-23654 | Improper Neutralization of Formula Elements in a CSV File in html-2-csv | 中危 | PyPIhtml-to-csv | 已审查 | 2021-12-01 06:22 | 2024-09-21 05:51 |
| GHSA-QPPG-V75C-R5FF CVE-2021-32061 | S3Scanner allows Directory Traversal | 中危 | PyPIs3scanner | 已审查 | 2021-12-01 06:21 | 2024-10-27 06:45 |
| GHSA-HF2M-J98R-4FQW CVE-2021-43786 | API token verification can be bypassed in NodeBB | 严重 | npmnodebb | 已审查 | 2021-12-01 06:21 | 2021-12-01 23:06 |
| GHSA-WX69-RVG3-X7FC CVE-2021-43787 | XSS via prototype pollution in NodeBB | 严重 | npmnodebb | 已审查 | 2021-12-01 06:21 | 2021-12-01 23:07 |
| GHSA-PFJ7-2QFW-VWGM CVE-2021-43788 | NodeBB vulnerable to path traversal in translator module | 中危 | npmnodebb | 已审查 | 2021-12-01 06:20 | 2022-09-15 04:37 |
| GHSA-HF79-8HJP-RRVQ CVE-2021-43790 | Use After Free in lucet | 高危 | crates.iolucet-runtime | 已审查 | 2021-12-01 06:20 | 2026-01-21 03:01 |