检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-FW2F-7F87-5R6C CVE-2020-7674 | Improper Input Validation in access-policy | 严重 | npmaccess-policy | 已审查 | 2021-05-18 05:00 | 2021-07-30 02:14 |
| GHSA-V756-4WHV-48VC CVE-2020-7675 |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 严重 |
npmcd-messenger |
| 已审查 |
| 2021-05-18 05:00 |
| 2021-07-30 02:13 |
| GHSA-J665-RVJ7-2JV9 CVE-2020-7672 | Code Injection in mosc | 高危 | npmmosc | 已审查 | 2021-05-18 05:00 | 2021-07-30 02:11 |
| GHSA-RWXP-HWWF-653V CVE-2021-32817 | Insecure template handling in express-hbs | 中危 | npmexpress-hbs | 已审查 | 2021-05-18 04:58 | 2023-04-05 01:30 |
| GHSA-M7MF-VM62-7X3Q CVE-2021-32818 | Insecure template handling in haml-coffee | 高危 | npmhaml-coffee | 已审查 | 2021-05-18 04:58 | 2021-05-18 03:07 |
| GHSA-Q8J6-PWQX-PM96 CVE-2021-32819 | Insecure template handling in Squirrelly | 高危 | npmsquirrelly | 已审查 | 2021-05-18 04:58 | 2023-09-12 00:25 |
| GHSA-CWCX-RXGC-CMW3 CVE-2021-25943 | Prototype pollution in 101 | 严重 | npm101 | 已审查 | 2021-05-18 04:57 | 2025-05-01 08:21 |
| GHSA-V659-54CX-G4QR CVE-2021-25941 | Prototype Pollution in deep-override | 严重 | npmdeep-override | 已审查 | 2021-05-18 04:57 | 2021-05-26 04:44 |
| GHSA-RC4Q-9M69-GQP8 CVE-2021-29624 | Lack of protection against cookie tossing attacks in fastify-csrf | 中危 | npmfastify-csrf | 已审查 | 2021-05-18 04:53 | 2021-05-18 04:29 |
| GHSA-G2QJ-PMXM-9F8F | User enumeration in authentication mechanisms | 低危 | Packagistsymfony/security-http+1 | 已审查 | 2021-05-18 04:52 | 2021-10-09 05:21 |
| GHSA-2FRX-J9HJ-6C65 | User enumeration in authentication mechanisms | 低危 | Packagistlexik/jwt-authentication-bundle | 已审查 | 2021-05-18 04:52 | 2021-10-09 05:21 |
| GHSA-7RRM-V45F-JP64 | Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12 | 中危 | RubyGemsnokogiri | 已审查 | 2021-05-18 04:52 | 2023-07-08 01:19 |
| GHSA-6QMF-FJ6M-686C CVE-2021-32618 | Open Redirect in Flask-Security-Too | 低危 | PyPIFlask-Security-Too | 已审查 | 2021-05-18 04:51 | 2024-09-21 05:06 |
| GHSA-8796-GC9J-63RV | File upload local preview can run embedded scripts after user interaction | 中危 | npmmatrix-react-sdk | 已审查 | 2021-05-18 04:51 | 2021-10-06 00:31 |
| GHSA-8RF5-92JH-3VC9 CVE-2021-23900 | Uncaught Exception leading to Denial of Service in json-sanitizer | 高危 | Mavencom.mikesamuel:json-sanitizer | 已审查 | 2021-05-14 06:31 | 2021-04-07 05:46 |
| GHSA-8P36-Q63G-68QH CVE-2021-27582 | Autobinding vulnerability in MITREid Connect | 严重 | Mavenorg.mitre:openid-connect-parent | 已审查 | 2021-05-14 06:31 | 2022-12-03 11:46 |
| GHSA-7R83-W6R8-FH6W CVE-2021-21043 | Reflected Cross-site Scripting (XSS) in ACS Commons | 中危 | Mavencom.adobe.acs:acs-aem-commons | 已审查 | 2021-05-14 06:31 | 2021-12-14 05:34 |
| GHSA-7Q4H-PJ78-J7VG CVE-2021-22696 | Authorization service vulnerable to DDos attacks in Apache CFX | 高危 | Mavenorg.apache.cxf:apache-cxf+1 | 已审查 | 2021-05-14 06:31 | 2021-10-22 01:14 |
| GHSA-792R-MH2Q-P8QP CVE-2021-26715 | Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server | 高危 | Mavenorg.mitre:openid-connect-server | 已审查 | 2021-05-14 06:30 | 2021-04-01 07:22 |
| GHSA-74QP-233X-P5J8 CVE-2021-26544 | Apache Livy Cross-site scripting (XSS) in session names | 中危 | Mavenorg.apache.livy:livy-server | 已审查 | 2021-05-14 06:30 | 2023-09-25 19:24 |
| GHSA-6VQP-H455-42MR CVE-2021-27906 | Uncontrolled Memory Allocation in Apache PDFBox | 中危 | Mavenorg.apache.pdfbox:pdfbox | 已审查 | 2021-05-14 06:30 | 2021-10-22 01:32 |
| GHSA-2RVV-W9R2-RG7M CVE-2021-24122 | Information Disclosure in Apache Tomcat | 中危 | Mavenorg.apache.tomcat.embed:tomcat-embed-core | 已审查 | 2021-05-14 06:30 | 2024-03-12 00:32 |
| GHSA-2MQ8-99Q7-55WX CVE-2021-20222 | Code injection in keycloak | 高危 | Mavenorg.keycloak:keycloak-parent | 已审查 | 2021-05-14 06:29 | 2021-03-25 07:54 |
| GHSA-5JQP-QGF6-3PVH CVE-2021-29510 | Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic | 中危 | PyPIpydantic | 已审查 | 2021-05-14 04:23 | 2026-06-09 21:01 |
| GHSA-5PV8-PPVJ-4H68 CVE-2021-21424 | Prevent user enumeration using Guard or the new Authenticator-based Security | 中危 | Packagistlexik/jwt-authentication-bundle+6 | 已审查 | 2021-05-14 04:23 | 2024-02-26 20:39 |