检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-GP32-7H29-RPXM CVE-2019-9658 | Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle | 中危 | Mavencom.puppycrawl.tools:checkstyle | 已审查 | 2019-03-14 23:39 | 2021-09-13 20:37 |
| GHSA-2J5V-FC74-J9Q2 CVE-2019-9737 | Cross-Site Scripting in editor.md |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
npmeditor.md |
| 已审查 |
| 2019-03-14 23:38 |
| 2021-08-31 05:58 |
| GHSA-M42H-MH85-4QGC CVE-2019-5420 | Use of Insufficiently Random Values in Railties Allows Remote Code Execution | 严重 | RubyGemsrailties | 已审查 | 2019-03-14 01:28 | 2023-07-06 04:28 |
| GHSA-86G5-2WH3-GC9J CVE-2019-5418 | Path Traversal in Action View | 高危 | RubyGemsactionview | 已审查 | 2019-03-14 01:26 | 2025-10-23 01:42 |
| GHSA-M63J-WH5W-C252 CVE-2019-5419 | Denial of Service Vulnerability in Action View | 高危 | RubyGemsactionview | 已审查 | 2019-03-14 01:25 | 2023-08-09 00:46 |
| GHSA-8554-JXCW-454Q CVE-2019-9710 | Webargs mishandles concurrent JSON parsing | 高危 | PyPIwebargs | 已审查 | 2019-03-12 23:16 | 2025-08-05 05:03 |
| GHSA-C9H6-XHG9-XXRV CVE-2019-0200 | Improper Input Validation in Apache Qpid Broker-J | 高危 | Mavenorg.apache.qpid:apache-qpid-broker-j | 已审查 | 2019-03-08 02:48 | 2022-09-15 06:45 |
| GHSA-WG37-7MRV-CFWM CVE-2019-0187 | Unauthenticated Remote Code Execution in Apache JMeter | 严重 | Mavenorg.apache.jmeter:ApacheJMeter | 已审查 | 2019-03-08 02:47 | 2022-09-15 06:45 |
| GHSA-P2XQ-VCM7-XJJ6 CVE-2018-11793 | Stack Overflow in Apache Mesos | 高危 | Mavenorg.apache.mesos:mesos | 已审查 | 2019-03-07 01:36 | 2022-09-15 06:44 |
| GHSA-PFWP-8PQ4-G7PV CVE-2019-9212 | Incomplete List of Disallowed Inputs in SOFA-Hessian | 严重 | Mavencom.alipay.sofa:hessian | 已审查 | 2019-03-07 01:36 | 2024-03-22 00:02 |
| GHSA-99CV-8CVV-666C CVE-2018-20244 | Apache Airflow vulnerable to Stored XSS | 中危 | PyPIapache-airflow | 已审查 | 2019-03-07 01:35 | 2024-09-11 05:42 |
| GHSA-XGJC-49CW-529M CVE-2019-9142 | Moderate severity vulnerability that affects org.b3log:symphony | 中危 | Mavenorg.b3log:symphony | 已审查 | 2019-03-07 01:35 | 2021-09-22 06:32 |
| GHSA-FX7M-J728-MJW3 CVE-2018-20164 | uap-core Regular Expression Denial of Service issue | 中危 | npmuap-core | 已审查 | 2019-03-07 01:35 | 2023-01-24 01:07 |
| GHSA-9V3M-8FP8-MJ99 CVE-2019-8331 | Bootstrap Vulnerable to Cross-Site Scripting | 中危 | Mavenbootstrap+6 | 已审查 | 2019-02-23 04:54 | 2026-06-03 06:01 |
| GHSA-3Q32-J57W-Q4W7 CVE-2019-8903 | Path Traversal in total.js | 高危 | npmtotal.js | 已审查 | 2019-02-20 23:40 | 2021-09-01 05:22 |
| GHSA-6663-C963-2GQG CVE-2016-10542 | DoS due to excessively large websocket message in ws | 高危 | npmws | 已审查 | 2019-02-19 07:58 | 2020-09-01 02:11 |
| GHSA-QG8P-V9Q4-GH34 CVE-2016-10541 | Potential Command Injection in shell-quote | 严重 | npmshell-quote | 已审查 | 2019-02-19 07:58 | 2022-11-23 01:49 |
| GHSA-Q43M-FFWR-RPCC CVE-2016-10534 | SSL Validation Defaults to False in electron-packager | 低危 | npmelectron-packager | 已审查 | 2019-02-19 07:58 | 2021-01-09 02:18 |
| GHSA-VFVF-MQQ8-RWQC CVE-2016-10531 | Sanitization bypass using HTML Entities in marked | 中危 | npmmarked | 已审查 | 2019-02-19 07:58 | 2023-09-08 06:23 |
| GHSA-856X-CP3Q-47VG CVE-2016-10530 | Insecure Default Configuration in airbrake | 中危 | npmairbrake | 已审查 | 2019-02-19 07:58 | 2020-09-01 02:10 |
| GHSA-JH5W-6964-X5CF CVE-2016-10579 | chromedriver Downloads Resources over HTTP | 高危 | npmchromedriver | 已审查 | 2019-02-19 07:58 | 2025-07-11 22:30 |
| GHSA-2HPJ-G53M-9GJ6 CVE-2016-10583 | closure-util downloads Resources over HTTP | 高危 | npmclosure-util | 已审查 | 2019-02-19 07:58 | 2023-09-09 04:52 |
| GHSA-899G-6Q6W-7V94 CVE-2018-16485 | m-server Vulnerable to Directory Traversal | 中危 | npmm-server | 已审查 | 2019-02-19 07:58 | 2023-09-13 04:43 |
| GHSA-VVWP-3F54-XC39 CVE-2016-10635 | Downloads Resources over HTTP in broccoli-closure | 高危 | npmbroccoli-closure | 已审查 | 2019-02-19 07:57 | 2021-01-08 09:57 |
| GHSA-4PF7-579W-F4GM CVE-2016-10633 | dwebp-bin downloads Resources over HTTP | 高危 | npmdwebp-bin | 已审查 | 2019-02-19 07:57 | 2023-09-08 04:13 |