检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-P86X-652P-6385 CVE-2012-5577 | Incorrect Default Permissions in keyring | 高危 | PyPIkeyring | 已审查 | 2020-03-12 05:36 | 2024-09-28 02:27 |
| GHSA-M8QC-MF6P-PFQ9 CVE-2014-1938 | Link Following in rply |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
PyPIrply |
| 已审查 |
| 2020-03-12 04:56 |
| 2024-10-27 06:44 |
| GHSA-8867-VPM3-G98G CVE-2012-5578 | Incorrect Default Permissions in keyring | 高危 | PyPIkeyring | 已审查 | 2020-03-11 04:56 | 2024-09-28 05:34 |
| GHSA-9VG3-CF92-H2H7 CVE-2013-2167 | Insufficient Verification of Data Authenticity in python-keystoneclient | 严重 | PyPIpython-keystoneclient | 已审查 | 2020-03-11 04:39 | 2024-10-25 05:57 |
| GHSA-3HW5-Q855-G6CW CVE-2020-5259 | Prototype Pollution in Dojox | 低危 | npmdojox | 已审查 | 2020-03-11 02:03 | 2021-02-19 03:45 |
| GHSA-JXFH-8WGV-VFR2 CVE-2020-5258 | Prototype pollution in dojo | 高危 | npmdojo | 已审查 | 2020-03-11 02:03 | 2022-02-09 06:06 |
| GHSA-PCQQ-5962-HVCW | Denial of Service in uap-core when processing crafted User-Agent strings | 高危 | RubyGemsuser_agent_parser | 已审查 | 2020-03-11 02:02 | 2025-05-23 01:12 |
| GHSA-WH37-37XW-54HR CVE-2014-8650 | Improper Authentication in requests-kerberos | 严重 | PyPIrequests-kerberos | 已审查 | 2020-03-11 02:02 | 2024-10-27 06:45 |
| GHSA-P94W-42G3-F7H4 | Holder can (re)create authentic credentials after receiving a credential in vp-toolkit | 高危 | npmvp-toolkit | 已审查 | 2020-03-06 09:16 | 2020-02-29 00:38 |
| GHSA-FF5X-W9WG-H275 | Holder can generate proof of ownership for credentials it does not control in vp-toolkit | 高危 | npmvp-toolkit | 已审查 | 2020-03-06 09:15 | 2020-02-29 00:38 |
| GHSA-738M-F33V-QC2R CVE-2015-8476 | SMTP Injection in PHPMailer | 低危 | Packagistphpmailer/phpmailer | 已审查 | 2020-03-06 06:09 | 2020-03-06 05:57 |
| GHSA-5F37-GXVH-23V6 CVE-2016-10033 | Remote code execution in PHPMailer | 严重 | Packagistphpmailer/phpmailer | 已审查 | 2020-03-06 06:09 | 2025-10-23 01:33 |
| GHSA-4PC3-96MX-WWC8 CVE-2016-10045 | Remote code execution in PHPMailer | 严重 | Packagistphpmailer/phpmailer | 已审查 | 2020-03-06 06:09 | 2025-04-15 06:05 |
| GHSA-58MJ-PW57-4VM2 CVE-2017-11503 | Cross-site scripting in PHPMailer | 中危 | Packagistphpmailer/phpmailer | 已审查 | 2020-03-06 06:09 | 2021-08-20 03:44 |
| GHSA-4X5H-CR29-FHP6 CVE-2017-5223 | Local file disclosure in PHPMailer | 中危 | Packagistphpmailer/phpmailer | 已审查 | 2020-03-06 06:09 | 2021-08-20 03:50 |
| GHSA-7W4P-72J7-V7C2 CVE-2018-19296 | Phar object injection in PHPMailer | 高危 | Packagistphpmailer/phpmailer | 已审查 | 2020-03-06 06:08 | 2021-08-20 03:57 |
| GHSA-4W82-R329-3Q67 CVE-2020-8840 | Deserialization of Untrusted Data in jackson-databind | 严重 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-03-05 04:52 | 2023-06-09 03:02 |
| GHSA-GWW7-P5W4-WRFV CVE-2019-20330 | Deserialization of Untrusted Data in jackson-databind | 严重 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-03-05 04:52 | 2024-03-15 08:52 |
| GHSA-H4MF-75HF-67W4 CVE-2020-5251 | Information disclosure in parse-server | 高危 | npmparse-server | 已审查 | 2020-03-05 04:20 | 2021-01-09 04:27 |
| GHSA-33VF-4XGG-9R58 CVE-2020-5249 | HTTP Response Splitting (Early Hints) in Puma | 中危 | RubyGemspuma | 已审查 | 2020-03-04 07:33 | 2023-05-17 00:16 |
| GHSA-6V7P-V754-J89V CVE-2020-6858 | HTTP Response Splitting in Styx | 中危 | Mavencom.hotels.styx:styx-api | 已审查 | 2020-03-03 23:32 | 2021-08-20 03:37 |
| GHSA-JPPV-GW3R-W3Q8 CVE-2020-8130 | OS Command Injection in Rake | 中危 | RubyGemsrake | 已审查 | 2020-02-29 00:54 | 2023-08-29 23:03 |
| GHSA-84J7-475P-HP8V CVE-2020-5247 | HTTP Response Splitting in Puma | 中危 | RubyGemspuma | 已审查 | 2020-02-29 00:53 | 2023-05-17 00:16 |
| GHSA-767J-JFH2-JVRC CVE-2019-17569 | Potential HTTP request smuggling in Apache Tomcat | 中危 | Mavenorg.apache.tomcat:tomcat+1 | 已审查 | 2020-02-28 09:10 | 2022-09-08 22:06 |
| GHSA-QXF4-CHVG-4R8R CVE-2020-1935 | Potential HTTP request smuggling in Apache Tomcat | 中危 | Mavenorg.apache.tomcat:tomcat+1 | 已审查 | 2020-02-28 09:10 | 2021-08-20 03:30 |