检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-9WCG-JRWF-8GG7 CVE-2020-7699 | Prototype Pollution in express-fileupload | 严重 | npmexpress-fileupload | 已审查 | 2020-08-05 22:53 | 2022-05-04 10:19 |
| GHSA-86QR-9VQC-PGC6 CVE-2020-5413 |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 严重 |
Mavenorg.springframework.integration:spring-integration-core |
| 已审查 |
| 2020-08-05 22:53 |
| 2021-10-22 04:51 |
| GHSA-X3RH-M7VP-35F2 CVE-2019-17638 | Operation on a Resource after Expiration or Release in Jetty Server | 严重 | Mavenorg.eclipse.jetty:jetty-server | 已审查 | 2020-08-05 22:52 | 2021-06-16 02:11 |
| GHSA-55MM-5399-7R63 CVE-2020-15128 | Reliance on Cookies without validation in OctoberCMS | 中危 | Packagistoctober/rain | 已审查 | 2020-08-05 22:52 | 2021-03-05 02:25 |
| GHSA-W4PJ-7P68-3VGV CVE-2020-11083 | Stored XSS in October | 低危 | Packagistoctober/backend | 已审查 | 2020-08-05 22:52 | 2023-01-31 09:29 |
| GHSA-3MVG-RRRW-M7PH CVE-2020-15109 | Ability to change order address without triggering address validations in solidus | 中危 | RubyGemssolidus_api+1 | 已审查 | 2020-08-05 06:17 | 2021-11-19 23:41 |
| GHSA-WWRJ-35W6-77FF CVE-2020-15135 | CSRF vulnerability in save-server | 中危 | npmsave-server | 已审查 | 2020-08-04 22:54 | 2021-01-08 07:42 |
| GHSA-WX84-69JH-JJP2 | Withdrawn 已撤回 | 高危 | npmsshpk | 已审查 | 2020-08-04 02:22 | 2020-08-04 02:22 |
| GHSA-P56R-JR4P-4WGH | Withdrawn 已撤回 | 高危 | npmwhereis | 已审查 | 2020-08-04 02:16 | 2020-08-04 02:16 |
| GHSA-CHGG-RRMV-5Q7X | Withdrawn 已撤回 | 中危 | npmjwt-simple | 已审查 | 2020-08-04 02:05 | 2020-08-04 02:05 |
| GHSA-32VW-R77C-GM67 | Withdrawn Advisory: marked cross-site scripting vulnerability 已撤回 | 中危 | npmmarked | 已审查 | 2020-08-04 01:57 | 2025-02-26 23:25 |
| GHSA-2V5C-755P-P4GV CVE-2020-15133 | Missing TLS certificate verification in faye-websocket | 高危 | RubyGemsfaye-websocket | 已审查 | 2020-08-01 01:40 | 2023-05-17 00:01 |
| GHSA-3Q49-H8F9-9FR9 CVE-2020-15134 | Missing TLS certificate verification | 高危 | RubyGemsfaye | 已审查 | 2020-08-01 01:39 | 2023-05-17 00:03 |
| GHSA-FPQV-X9HM-35J9 CVE-2020-16095 | Cross-site Scripting vulnerability in Kitodo.Presentation | 中危 | Packagistkitodo/presentation | 已审查 | 2020-08-01 01:39 | 2024-06-04 02:36 |
| GHSA-HG7C-66FF-9Q8G | Sandbox bypass in constantinople 已撤回 | 中危 | npmconstantinople | 已审查 | 2020-08-01 00:18 | 2020-08-01 00:18 |
| GHSA-6JMR-JFH7-XG3H CVE-2020-15131 | False-positive validity for NFT1 genesis transactions | 严重 | npmslp-validate | 已审查 | 2020-07-30 22:58 | 2021-01-09 05:00 |
| GHSA-CC2P-4JHR-XHHX CVE-2020-15130 | False-positive validity for NFT1 genesis transactions in SLPJS | 严重 | npmslpjs | 已审查 | 2020-07-30 22:58 | 2021-01-08 07:43 |
| GHSA-FF7X-QRG7-QGGM CVE-2020-8116 | dot-prop Prototype Pollution vulnerability | 高危 | npmdot-prop | 已审查 | 2020-07-30 04:56 | 2022-08-11 22:58 |
| GHSA-VH7M-P724-62C2 CVE-2020-13822 | Signature Malleabillity in elliptic | 高危 | npmelliptic | 已审查 | 2020-07-30 04:40 | 2024-10-17 01:02 |
| GHSA-9VFJ-5G7H-4P24 CVE-2020-11994 | Server side template injection in Apache Camel | 高危 | Mavenorg.apache.camel:camel-robotframework | 已审查 | 2020-07-30 02:08 | 2021-06-16 02:10 |
| GHSA-Q7J5-9J77-G4GQ CVE-2020-15515 | Remote code execution in turn extension for TYPO3 | 高危 | Packagistmarcwillmann/turn | 已审查 | 2020-07-30 02:07 | 2021-07-30 04:50 |
| GHSA-57GR-JVQR-3HWM CVE-2020-15513 | Incorrect access control in typo3_forum | 中危 | Packagistmittwald/typo3_forum | 已审查 | 2020-07-30 02:07 | 2021-09-24 01:35 |
| GHSA-VR98-27QJ-3C8Q CVE-2020-7686 | Directory traversal in rollup-plugin-server | 高危 | npmrollup-plugin-server | 已审查 | 2020-07-30 02:07 | 2023-09-06 07:31 |
| GHSA-F97H-2PFX-F59F CVE-2020-7695 | HTTP response splitting in uvicorn | 高危 | PyPIuvicorn | 已审查 | 2020-07-30 02:07 | 2024-11-19 06:31 |
| GHSA-33C7-2MPW-HG34 CVE-2020-7694 | Log injection in uvicorn | 高危 | PyPIuvicorn | 已审查 | 2020-07-30 02:07 | 2024-11-19 06:32 |