检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-7VMW-7X57-Q6JW CVE-2021-32713 | Cross-site scripting | 中危 | Packagistshopware/shopware | 已审查 | 2021-09-09 02:00 | 2021-06-25 23:33 |
| GHSA-QWPP-FGRJ-H78Q CVE-2021-32712 | Exposure of Sensitive Information to an Unauthorized Actor |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
Packagistshopware/shopware |
| 已审查 |
| 2021-09-09 01:59 |
| 2021-06-25 23:32 |
| GHSA-F34X-8PF6-QC9C CVE-2021-40143 | HTTP header injection in Sonatype Nexus Repository | 高危 | Mavenorg.sonatype.nexus:nexus-repository | 已审查 | 2021-09-09 01:42 | 2021-09-16 02:27 |
| GHSA-7Q44-GFVQ-6G93 CVE-2020-18155 | SQL Injection in Subrion CMS | 严重 | Packagistintelliants/subrion | 已审查 | 2021-09-09 01:27 | 2021-08-03 06:55 |
| GHSA-3C33-3465-FHX2 CVE-2020-15877 | Exposure of Resource to Wrong Sphere in LibreNMS | 高危 | Packagistlibrenms/librenms | 已审查 | 2021-09-09 01:27 | 2021-07-27 03:20 |
| GHSA-JJCX-999M-35HC CVE-2019-14671 | Improper Input Validation in Firefly III | 低危 | Packagistgrumpydictator/firefly-iii | 已审查 | 2021-09-09 01:27 | 2021-07-23 05:50 |
| GHSA-748F-WV76-X9HG CVE-2021-28931 | Arbitrary file upload in Fork CMS | 高危 | Packagistforkcms/forkcms | 已审查 | 2021-09-09 01:26 | 2021-07-13 23:53 |
| GHSA-592V-7FRM-H44Q CVE-2020-23700 | Cross-site scripting in LavaLite-CMS | 中危 | Packagistlavalite/cms | 已审查 | 2021-09-09 01:25 | 2021-07-13 23:53 |
| GHSA-3Q6G-VF58-7M4G CVE-2021-32838 | Regular Expression Denial of Service in flask-restx | 高危 | PyPIflask-restx | 已审查 | 2021-09-08 23:41 | 2024-09-21 01:57 |
| GHSA-9Q5W-79CV-947M CVE-2021-39199 | Unsafe defaults in `remark-html` | 严重 | npmremark-html | 已审查 | 2021-09-08 07:10 | 2021-09-08 03:05 |
| GHSA-R659-8XFP-J327 CVE-2021-3766 | objection.js Prototype Pollution vulnerability | 严重 | npmobjection | 已审查 | 2021-09-08 07:09 | 2023-09-08 02:40 |
| GHSA-MFV7-GQ43-W965 CVE-2021-25737 | Incomplete List of Disallowed Inputs in Kubernetes | 中危 | Gok8s.io/kubernetes | 已审查 | 2021-09-08 07:09 | 2021-09-15 02:47 |
| GHSA-97PV-4338-R5VP CVE-2021-23439 | Cross-site Scripting in file-upload-with-preview | 中危 | npmfile-upload-with-preview | 已审查 | 2021-09-08 07:08 | 2021-09-08 02:05 |
| GHSA-FMM9-3GV8-58F4 CVE-2021-39194 | Improper Handling of Missing Values in kaml | 中危 | Mavencom.charleskorn.kaml:kaml | 已审查 | 2021-09-08 07:08 | 2021-09-08 22:47 |
| GHSA-W3J4-76QW-WWJM CVE-2021-39197 | Older releases of better_errors open to Cross-Site Request Forgery attack | 中危 | RubyGemsbetter_errors | 已审查 | 2021-09-08 07:08 | 2021-09-08 22:47 |
| GHSA-98VV-PW6R-Q6Q4 CVE-2021-23437 | Uncontrolled Resource Consumption in pillow | 高危 | PyPIpillow | 已审查 | 2021-09-08 07:08 | 2024-10-10 05:02 |
| GHSA-2C83-WFV3-Q25F | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in ZMarkdown | 严重 | npmrebber | 已审查 | 2021-09-08 07:07 | 2021-09-07 22:04 |
| GHSA-H77F-XXX7-4858 CVE-2021-39177 | User impersonation due to incorrect handling of the login JWT | 高危 | Mavenorg.geysermc:connector | 已审查 | 2021-09-08 07:04 | 2021-09-07 22:04 |
| GHSA-C8XP-8MF3-62H9 CVE-2021-3761 | OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values | 高危 | Gogithub.com/cloudflare/cfrpki | 已审查 | 2021-09-08 07:02 | 2021-09-04 05:40 |
| GHSA-593V-WCQX-HQ2W | Incorrect version tags linked to external repository | 严重 | npmparse-server | 已审查 | 2021-09-08 06:57 | 2021-09-04 05:34 |
| GHSA-C36V-FMGQ-M8HX CVE-2021-3757 | Prototype Pollution in immer | 高危 | npmimmer | 已审查 | 2021-09-08 06:57 | 2024-04-26 06:09 |
| GHSA-87P2-CVHQ-Q4MV CVE-2020-13929 | Authentication bypass in Apache Zeppelin | 高危 | Mavenorg.apache.zeppelin:zeppelin | 已审查 | 2021-09-08 06:56 | 2021-09-14 04:32 |
| GHSA-4QW8-PGPR-P9MQ CVE-2019-10095 | Bash command injection in Apache Zeppelin | 严重 | Mavenorg.apache.zeppelin:zeppelin | 已审查 | 2021-09-08 06:56 | 2023-11-28 05:44 |
| GHSA-MF7Q-GW5F-Q8JJ CVE-2021-27578 | Cross-site Scripting in Apache Zeppelin | 中危 | Mavenorg.apache.zeppelin:zeppelin | 已审查 | 2021-09-08 06:55 | 2021-09-11 00:49 |
| GHSA-JPWX-FFJQ-WR4W | Content object state fetch functions open to SQL injection | 高危 | Packagistezsystems/ezpublish-legacy | 已审查 | 2021-09-08 06:54 | 2021-09-04 04:10 |