检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-C72P-9XMJ-RX3W CVE-2021-32760 | Archive package allows chmod of file outside of unpack target directory | 中危 | Gogithub.com/containerd/containerd | 已审查 | 2021-07-27 05:17 | 2024-01-31 23:31 |
| GHSA-34FR-FHQR-7235 CVE-2021-32767 | Information Disclosure in User Authentication |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
Packagisttypo3/cms+1 |
| 已审查 |
| 2021-07-27 05:16 |
| 2021-09-01 05:23 |
| GHSA-CJX7-399X-P2RJ CVE-2021-32769 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core | 高危 | Mavenio.micronaut:micronaut-http-server-netty | 已审查 | 2021-07-27 05:15 | 2021-07-28 23:37 |
| GHSA-3X9F-74H4-2FQR CVE-2021-32012 | Denial of Service in SheetJS Pro | 中危 | Mavenorg.webjars.npm:xlsx+1 | 已审查 | 2021-07-23 03:48 | 2022-02-09 05:02 |
| GHSA-8VCR-VXM8-293M CVE-2021-32013 | Denial of Service in SheetsJS Pro | 中危 | Mavenorg.webjars.npm:xlsx+1 | 已审查 | 2021-07-23 03:48 | 2022-02-09 05:02 |
| GHSA-G973-978J-2C3P CVE-2021-32014 | Denial of Service in SheetJS Pro | 中危 | Mavenorg.webjars.npm:xlsx+1 | 已审查 | 2021-07-23 03:47 | 2022-02-09 05:02 |
| GHSA-J5C2-HM46-WP5C CVE-2021-39192 | Privilege escalation: all users can access Admin-level API keys | 中危 | npmghost | 已审查 | 2021-07-23 03:43 | 2021-09-04 04:23 |
| GHSA-RGCG-28XM-8MMW CVE-2021-32669 | Cross-Site Scripting in Backend Grid View | 中危 | Packagisttypo3/cms+1 | 已审查 | 2021-07-23 03:37 | 2021-07-23 03:37 |
| GHSA-6MH3-J5R5-2379 CVE-2021-32668 | Cross-Site Scripting in Query Generator & Query View | 中危 | Packagisttypo3/cms+1 | 已审查 | 2021-07-23 03:36 | 2021-09-01 05:22 |
| GHSA-8MQ9-FQV8-59WF CVE-2021-32667 | Cross-Site Scripting in Page Preview | 中危 | Packagisttypo3/cms+1 | 已审查 | 2021-07-23 03:34 | 2021-09-01 05:22 |
| GHSA-7F53-FMMV-MFJV CVE-2020-1920 | Regular expression denial of service in react-native | 高危 | npmreact-native | 已审查 | 2021-07-21 01:33 | 2021-06-10 22:10 |
| GHSA-89GV-H8WF-CG8R CVE-2021-3647 | URIjs Vulnerable to Hostname spoofing via backslashes in URL | 中危 | npmurijs | 已审查 | 2021-07-20 05:22 | 2023-09-08 04:18 |
| GHSA-RR6V-H7M8-WC9F CVE-2021-28114 | Cross-site Scripting in Froala WYSIWYG Editor | 中危 | Packagistfroala/wysiwyg-editor | 已审查 | 2021-07-20 05:21 | 2021-07-29 23:14 |
| GHSA-8H2G-R292-J8XH CVE-2021-36213 | HashiCorp Consul L7 deny intention results in an allow action | 高危 | Gogithub.com/hashicorp/consul | 已审查 | 2021-07-20 05:21 | 2022-08-12 04:43 |
| GHSA-25GF-8QRR-G78R CVE-2021-32574 | Hashicorp Consul Missing SSL Certificate Validation | 高危 | Gogithub.com/hashicorp/consul | 已审查 | 2021-07-20 05:21 | 2022-08-12 04:43 |
| GHSA-RQJW-P5VR-C695 CVE-2021-32770 | Basic-auth app bundle credential exposure in gatsby-source-wordpress | 高危 | npmgatsby-source-wordpress | 已审查 | 2021-07-19 23:21 | 2021-07-28 23:18 |
| GHSA-7638-R9R3-RMJJ CVE-2021-3602 | Buildah processes using chroot isolation may leak environment values to intermediate processes | 中危 | Gogithub.com/containers/buildah | 已审查 | 2021-07-19 23:19 | 2023-08-30 02:32 |
| GHSA-VJV5-GP2W-65VM CVE-2021-34429 | Encoded URIs can access WEB-INF directory in Eclipse Jetty | 中危 | Mavenorg.eclipse.jetty:jetty-webapp | 已审查 | 2021-07-19 23:15 | 2022-04-19 23:15 |
| GHSA-9PQ7-RCXV-47VQ CVE-2021-27293 | Incorrect Regular Expression in RestSharp | 高危 | NuGetRestSharp | 已审查 | 2021-07-15 03:10 | 2021-07-16 04:24 |
| GHSA-2VP8-JV5V-6QH6 CVE-2021-3637 | Allocation of resources without limits or throttling in keycloak-model-infinispan | 高危 | Mavenorg.keycloak:keycloak-model-infinispan | 已审查 | 2021-07-14 01:43 | 2021-07-15 03:41 |
| GHSA-G8JX-66P8-VCM2 CVE-2021-23405 | SQL injection in pimcore/pimcore | 高危 | Packagistpimcore/pimcore | 已审查 | 2021-07-14 01:42 | 2021-07-29 01:37 |
| GHSA-QC36-Q22Q-CJW3 CVE-2021-38189 | SMTP command injection in lettre | 严重 | crates.iolettre | 已审查 | 2021-07-13 01:03 | 2021-08-19 02:52 |
| GHSA-JXHC-Q857-3J6G CVE-2021-32740 | Regular Expression Denial of Service in Addressable templates | 高危 | RubyGemsaddressable | 已审查 | 2021-07-13 00:58 | 2026-04-07 07:12 |
| GHSA-5H46-H7HH-C6X9 CVE-2021-32714 | Integer Overflow in Chunked Transfer-Encoding | 中危 | crates.iohyper | 已审查 | 2021-07-13 00:55 | 2021-09-08 05:47 |
| GHSA-F3PG-QWVG-P99C CVE-2021-32715 | Lenient Parsing of Content-Length Header When Prefixed with Plus Sign | 低危 | crates.iohyper | 已审查 | 2021-07-13 00:54 | 2021-09-08 05:49 |