检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-WWVV-X5MQ-H3JJ CVE-2021-3692 | Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev | 中危 | Packagistyiisoft/yii2-dev | 已审查 | 2021-09-02 02:35 | 2021-08-31 04:28 |
| GHSA-H97F-5258-5593 CVE-2021-38384 | Incorrect Authorization in serverless-offline |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 严重 |
npmserverless-offline |
| 已审查 |
| 2021-09-02 02:32 |
| 2023-09-06 07:13 |
| GHSA-V9J4-CP63-QV62 CVE-2021-38197 | Tarslip in go-unarr | 严重 | Gogithub.com/gen2brain/go-unarr | 已审查 | 2021-09-02 02:32 | 2021-08-31 05:24 |
| GHSA-G452-6RFC-VRVX CVE-2021-23419 | Prototype Pollution in open-graph | 中危 | npmopen-graph | 已审查 | 2021-09-02 02:31 | 2021-08-31 05:26 |
| GHSA-HXJ6-V58R-CQV3 CVE-2020-22392 | Cross Site Scripting in Subrion CMS | 中危 | Packagistintelliants/subrion | 已审查 | 2021-09-02 02:31 | 2021-08-31 05:28 |
| GHSA-246R-R2WF-FRHX CVE-2021-36804 | Malicious password-reset in Akaunting | 高危 | Packagistakaunting/akaunting | 已审查 | 2021-09-02 02:31 | 2021-09-03 23:58 |
| GHSA-PC4W-8V5J-29W9 CVE-2021-34371 | Deserialization of Untrusted Data in Neo4j | 严重 | Mavenorg.neo4j:neo4j | 已审查 | 2021-09-02 02:31 | 2021-08-31 05:46 |
| GHSA-8VH3-29MR-M9XG CVE-2021-3680 | Inadequate Encryption Strength in showdoc | 中危 | Packagistshowdoc/showdoc | 已审查 | 2021-09-02 02:31 | 2021-08-31 05:53 |
| GHSA-45W7-7G63-2M5W CVE-2021-28035 | Drop of uninitialized memory in stack_dst | 严重 | crates.iostack_dst | 已审查 | 2021-09-02 02:30 | 2023-06-14 04:53 |
| GHSA-8MJX-H23H-W2PG CVE-2021-28034 | Double free in stack_dst | 严重 | crates.iostack_dst | 已审查 | 2021-09-02 02:30 | 2023-06-14 04:52 |
| GHSA-XM9M-2VJ8-FMFR CVE-2021-28029 | Uninitialized memory access in toodee | 高危 | crates.iotoodee | 已审查 | 2021-09-02 02:30 | 2021-08-31 05:56 |
| GHSA-WCVP-R8J8-47PC CVE-2021-28028 | Double free in toodee | 严重 | crates.iotoodee | 已审查 | 2021-09-02 02:30 | 2023-06-14 05:58 |
| GHSA-V92M-HHHW-VV9V CVE-2019-19208 | Code injection in codiad | 严重 | Packagistcodiad/codiad | 已审查 | 2021-09-02 02:27 | 2021-08-31 05:59 |
| GHSA-Q4RF-3FHX-88PF CVE-2021-39132 | YAML deserialization can run untrusted code | 中危 | Mavenorg.rundeck:rundeck-core | 已审查 | 2021-09-02 02:27 | 2021-08-31 06:03 |
| GHSA-3JMW-C69H-426C CVE-2021-39133 | Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server | 高危 | Mavenorg.rundeck:rundeck-core | 已审查 | 2021-09-02 02:26 | 2021-08-31 06:03 |
| GHSA-JJ53-8FMW-F2W2 CVE-2021-39163 | Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner. | 低危 | PyPImatrix-synapse | 已审查 | 2021-09-02 02:25 | 2024-09-24 23:37 |
| GHSA-3X4C-PQ33-4W3Q CVE-2021-39164 | Improper authorisation of members discloses room membership to non-members | 低危 | PyPImatrix-synapse | 已审查 | 2021-09-02 02:25 | 2024-09-24 23:36 |
| GHSA-5RWJ-J5M3-3CHJ CVE-2021-39176 | Missing Release of Memory after Effective Lifetime in detect-character-encoding | 高危 | npmdetect-character-encoding | 已审查 | 2021-09-02 02:25 | 2021-10-21 22:28 |
| GHSA-9GR3-7897-PP7M CVE-2021-39178 | XSS in Image Optimization API for Next.js | 高危 | npmnext | 已审查 | 2021-09-02 02:24 | 2021-09-01 04:01 |
| GHSA-VWHC-PWW7-72X6 CVE-2021-32831 | Code Injection in total.js | 高危 | npmtotal.js | 已审查 | 2021-09-02 02:24 | 2021-09-01 04:25 |
| GHSA-RPQ8-MMWH-Q9HM CVE-2020-6950 | Directory traversal in Eclipse Mojarra | 高危 | Mavenorg.glassfish:mojarra-parent | 已审查 | 2021-09-02 02:23 | 2022-02-09 05:23 |
| GHSA-CPH5-M8F7-6C5X CVE-2021-3749 | axios Inefficient Regular Expression Complexity vulnerability | 高危 | npmaxios | 已审查 | 2021-09-02 02:23 | 2022-09-15 05:28 |
| GHSA-HW4V-5X4H-C3XM CVE-2021-39193 | Transaction validity oversight in pallet-ethereum | 中危 | crates.iopallet-ethereum | 已审查 | 2021-09-02 02:22 | 2024-10-25 05:18 |
| GHSA-W6J8-JC36-X5Q9 CVE-2021-39166 | Improper Neutralization of Text-Values in Object Version Preview | 高危 | Packagistpimcore/pimcore | 已审查 | 2021-09-02 02:22 | 2021-09-02 02:19 |
| GHSA-2V88-QQ7X-XQ5F CVE-2021-39170 | Improper Encoding or Escaping of Output in Asset Metadata Component | 高危 | Packagistpimcore/pimcore | 已审查 | 2021-09-02 02:21 | 2021-09-02 02:20 |