检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-27V7-QHFV-RQQ8 | Insecure Credential Storage in web3 | 低危 | npmweb3 | 已审查 | 2019-05-31 01:26 | 2021-09-01 04:56 |
| GHSA-87MG-H5R3-HW88 | Cross-Site Scripting in bootbox | 中危 |
当前筛选结果 35,190 条 · 时间按北京时间显示
npmbootbox |
| 已审查 |
| 2019-05-31 01:23 |
| 2021-09-17 05:01 |
| GHSA-XF7W-R453-M56C CVE-2019-13173 | Arbitrary File Overwrite in fstream | 高危 | npmfstream | 已审查 | 2019-05-31 01:19 | 2021-08-05 04:12 |
| GHSA-6QH5-WX38-Q92G | Directory Traversal in ltt.js | 高危 | npmltt.js | 已审查 | 2019-05-31 01:15 | 2020-09-01 02:22 |
| GHSA-JJPQ-GP5Q-8Q6W CVE-2019-0221 | Cross-site scripting in Apache Tomcat | 中危 | Mavenorg.apache.tomcat:tomcat+2 | 已审查 | 2019-05-30 11:30 | 2026-06-19 04:17 |
| GHSA-2HWP-G4G7-MWWJ | Reflected Cross-Site Scripting in jquery.terminal | 中危 | npmjquery.terminal | 已审查 | 2019-05-30 04:25 | 2020-09-01 02:35 |
| GHSA-P72P-RJR2-R439 | Server-Side Request Forgery in terriajs-server | 高危 | npmterriajs-server | 已审查 | 2019-05-30 04:24 | 2020-09-01 02:35 |
| GHSA-QR32-J4J6-3M7R CVE-2017-16087 | Duplicate Advisory: Command Injection in fs-git 已撤回 | 高危 | npmfs-git | 已审查 | 2019-05-30 04:23 | 2026-01-24 06:50 |
| GHSA-2XV3-H762-CCXV | Out-of-bounds Read in concat-with-sourcemaps | 中危 | npmconcat-with-sourcemaps | 已审查 | 2019-05-30 03:18 | 2020-09-01 02:31 |
| GHSA-WW4X-RWQ6-QPGF CVE-2015-9284 | OmniAuth Ruby gem Cross-site Request Forgery in request phase | 高危 | RubyGemsomniauth | 已审查 | 2019-05-30 03:11 | 2024-02-15 23:03 |
| GHSA-2HW2-62CP-P9P7 CVE-2019-0201 | Access control bypass in Apache ZooKeeper | 中危 | Mavenorg.apache.zookeeper:zookeeper | 已审查 | 2019-05-30 02:54 | 2021-07-28 04:54 |
| GHSA-G86P-HGX5-2PFH CVE-2019-12300 | Improper Authentication in Buildbot | 严重 | PyPIbuildbot | 已审查 | 2019-05-30 02:48 | 2024-09-14 01:46 |
| GHSA-GH4G-3GM9-5WRQ CVE-2019-12313 | Cross-Site Scripting in shave | 中危 | npmshave | 已审查 | 2019-05-30 02:38 | 2021-08-05 00:06 |
| GHSA-H896-MX9X-G32G CVE-2019-0188 | XML External Entity injection in Apache Camel | 高危 | Mavenorg.apache.camel:camel-core+1 | 已审查 | 2019-05-30 02:15 | 2022-11-18 01:55 |
| GHSA-23GJ-368H-92PQ CVE-2019-11082 | Path Traversal in DKPro Core | 高危 | Mavende.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.api.datasets-asl | 已审查 | 2019-05-30 02:05 | 2021-08-04 23:17 |
| GHSA-F554-X222-WGF7 CVE-2013-7285 | Command Injection in Xstream | 严重 | Mavencom.thoughtworks.xstream:xstream | 已审查 | 2019-05-30 02:05 | 2024-03-05 07:51 |
| GHSA-36M4-6V6M-4VPR CVE-2019-12043 | Cross-site Scripting in remarkable | 中危 | npmremarkable | 已审查 | 2019-05-30 02:04 | 2023-09-09 03:21 |
| GHSA-42XW-2XVC-QX8M CVE-2019-10742 | Denial of Service in axios | 高危 | npmaxios | 已审查 | 2019-05-30 02:04 | 2021-07-28 04:36 |
| GHSA-78J5-GCMF-VQC8 CVE-2019-14772 | Cross-Site Scripting (XSS) in Verdaccio | 中危 | npmverdaccio | 已审查 | 2019-05-30 02:02 | 2021-10-07 06:02 |
| GHSA-5WW9-J83M-Q7QX CVE-2019-12086 | Information exposure in FasterXML jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2019-05-23 17:32 | 2024-03-15 09:06 |
| GHSA-6QQF-VVCR-7QRV | Cryptographically Weak PRNG in generate-password | 中危 | npmgenerate-password | 已审查 | 2019-05-23 17:27 | 2020-09-01 02:34 |
| GHSA-5F7M-MMPC-QHH4 | mysql Node.JS Module Vulnerable to Remote Memory Exposure | 中危 | npmmysql | 已审查 | 2019-05-23 17:27 | 2022-08-04 04:30 |
| GHSA-PGR8-JG6H-8GW6 | Cross-Site Scripting in webpack-bundle-analyzer | 中危 | npmwebpack-bundle-analyzer | 已审查 | 2019-05-23 17:26 | 2021-08-04 23:26 |
| GHSA-4X49-W62V-76Q7 CVE-2019-3799 | Path Traversal in Spring Cloud Config | 中危 | Mavenorg.springframework.cloud:spring-cloud-config-server | 已审查 | 2019-05-23 16:39 | 2021-08-04 05:40 |
| GHSA-WV67-9JQ7-8R69 CVE-2019-5432 | Improper Input Validation and Buffer Over-read in mqtt-packet | 高危 | npmmqtt-packet | 已审查 | 2019-05-14 12:02 | 2021-08-04 05:47 |