检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-375M-5FVV-XQ23 | VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption | 低危 | PyPIvyper | 已审查 | 2021-04-19 23:11 | 2021-04-17 07:17 |
| GHSA-RVCW-F68W-8H8H CVE-2021-29446 | Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
npmjose-node-cjs-runtime |
| 已审查 |
| 2021-04-19 23:00 |
| 2023-03-18 01:49 |
| GHSA-4V4G-726H-XVFV CVE-2021-29445 | Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime | 中危 | npmjose-node-esm-runtime | 已审查 | 2021-04-19 22:59 | 2023-03-18 01:49 |
| GHSA-94HH-PJJG-RWMR CVE-2021-29444 | Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime | 中危 | npmjose-browser-runtime | 已审查 | 2021-04-19 22:58 | 2023-03-18 01:49 |
| GHSA-58F5-HFQC-JGCH CVE-2021-29443 | Padding Oracle Attack due to Observable Timing Discrepancy in jose | 中危 | npmjose | 已审查 | 2021-04-19 22:57 | 2021-04-17 07:01 |
| GHSA-6G3C-2MH5-7Q6X CVE-2021-29451 | Missing validation of JWT signature in `ManyDesigns/Portofino` | 严重 | Mavencom.manydesigns:portofino-core+1 | 已审查 | 2021-04-19 22:56 | 2023-09-26 00:03 |
| GHSA-MH74-4M5G-FCJX CVE-2021-29432 | Malicious users could abuse Sydent to control the content of invitation emails | 中危 | PyPImatrix-sydent | 已审查 | 2021-04-19 22:54 | 2024-09-25 01:39 |
| GHSA-9JHM-8M8C-C3F4 CVE-2021-29431 | SSRF in Sydent due to missing validation of hostnames | 中危 | PyPImatrix-sydent | 已审查 | 2021-04-19 22:54 | 2024-10-01 04:40 |
| GHSA-WMG4-8CP2-HPG9 CVE-2021-29430 | Sydent vulnerable to denial of service attack via memory exhaustion | 高危 | PyPImatrix-sydent | 已审查 | 2021-04-19 22:54 | 2024-09-24 23:43 |
| GHSA-CRH4-294P-VCFQ | Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17 | 高危 | Mavencom.vaadin:vaadin-text-field-flow | 已审查 | 2021-04-19 22:53 | 2021-10-09 05:22 |
| GHSA-JMX8-355M-8VWH CVE-2018-25007 | Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 | 低危 | Mavencom.vaadin:flow-server | 已审查 | 2021-04-19 22:53 | 2021-04-17 07:18 |
| GHSA-RP4X-WXQV-CF9M CVE-2019-25027 | Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 | 中危 | Mavencom.vaadin:flow-server | 已审查 | 2021-04-19 22:52 | 2021-04-17 07:17 |
| GHSA-RJWW-2X8V-M9V9 CVE-2020-36319 | Potential sensitive data exposure in applications using Vaadin 15 | 低危 | Mavencom.vaadin:flow-server | 已审查 | 2021-04-19 22:52 | 2022-09-22 03:31 |
| GHSA-49R2-73M6-PP8F CVE-2020-36321 | Directory traversal in development mode handler in Vaadin 14 and 15-17 | 中危 | Mavencom.vaadin:flow-server | 已审查 | 2021-04-19 22:51 | 2021-04-24 01:13 |
| GHSA-XWG3-QRCG-W9X6 CVE-2021-31404 | Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 | 中危 | Mavencom.vaadin:flow-server | 已审查 | 2021-04-19 22:51 | 2021-04-24 01:17 |
| GHSA-75XC-QVXH-27F8 CVE-2021-31403 | Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 | 中危 | Mavencom.vaadin:vaadin-bom+1 | 已审查 | 2021-04-19 22:51 | 2021-04-17 07:15 |
| GHSA-25XC-JWFQ-39JW CVE-2021-31407 | OSGi applications using Vaadin 12-14 and 19 vulnerable to server classes and resources exposure | 高危 | Mavencom.vaadin:flow-server | 已审查 | 2021-04-19 22:50 | 2022-08-16 04:03 |
| GHSA-P7JQ-V8JP-J424 CVE-2021-31406 | Timing side channel vulnerability in endpoint request handler in Vaadin 15-19 | 中危 | Mavencom.vaadin:flow-server | 已审查 | 2021-04-19 22:50 | 2021-04-17 07:15 |
| GHSA-Q74R-4XW3-PPX9 CVE-2019-25028 | Stored cross-site scripting in Grid component in Vaadin 7 and 8 | 中危 | Mavencom.vaadin:vaadin-bom+1 | 已审查 | 2021-04-19 22:49 | 2021-04-17 07:15 |
| GHSA-42J4-733X-5VCF CVE-2020-36320 | Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7 | 高危 | Mavencom.vaadin:vaadin-bom+1 | 已审查 | 2021-04-19 22:49 | 2024-05-15 14:27 |
| GHSA-3H5R-928V-MXHH | Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 | 低危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-19 22:49 | 2021-10-09 05:22 |
| GHSA-JQJ4-R483-4GVR | Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 | 中危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-19 22:48 | 2021-10-09 05:23 |
| GHSA-76F4-FW33-6J2V | Potential sensitive data exposure in applications using Vaadin 15 | 低危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-19 22:48 | 2021-10-09 05:23 |
| GHSA-82MF-MMH7-HXP5 | Directory traversal in development mode handler in Vaadin 14 and 15-17 | 中危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-19 22:48 | 2021-10-09 05:23 |
| GHSA-C6C4-7X48-4CQP | Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 | 中危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-19 22:47 | 2021-10-09 05:24 |