检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-RPRW-H62V-C2W7 CVE-2017-18342 | PyYAML insecurely deserializes YAML strings leading to arbitrary code execution | 严重 | PyPIPyYAML | 已审查 | 2019-01-05 01:45 | 2026-07-02 01:39 |
| GHSA-2X54-J4M3-R6WX CVE-2019-3575 |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 高危 |
PyPIsqla-yaml-fixtures |
| 已审查 |
| 2019-01-05 01:44 |
| 2024-10-28 22:23 |
| GHSA-45R8-3495-X6RM CVE-2018-18893 | Jinjava calls getClass | 中危 | Mavencom.hubspot.jinjava:jinjava | 已审查 | 2019-01-05 01:43 | 2022-09-17 08:06 |
| GHSA-QQV6-5W6P-3PGR CVE-2018-20594 | Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons | 中危 | Mavenorg.hswebframework.web:hsweb-commons | 已审查 | 2019-01-05 01:43 | 2021-09-17 04:04 |
| GHSA-4RM3-4MQ4-MFWR CVE-2018-20595 | Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons | 高危 | Mavenorg.hswebframework.web:hsweb-commons | 已审查 | 2019-01-05 01:43 | 2022-09-15 06:29 |
| GHSA-J87C-CJ65-VMH5 CVE-2017-18354 | rendertron LFI vulnerability | 高危 | npmrendertron | 已审查 | 2019-01-05 01:41 | 2023-09-07 04:06 |
| GHSA-4Q69-Q4Q7-X82C CVE-2017-18353 | rendertron can remotely shut down Chrome instance | 高危 | npmrendertron | 已审查 | 2019-01-05 01:41 | 2023-09-07 04:01 |
| GHSA-29GP-92WP-94Q8 CVE-2018-6342 | react-dev-utils on Windows vulnerable to Remote Code Execution | 高危 | npmreact-dev-utils | 已审查 | 2019-01-05 01:41 | 2022-08-04 03:36 |
| GHSA-CF66-XWFP-GVC4 CVE-2018-14732 | Missing Origin Validation in webpack-dev-server | 高危 | npmwebpack-dev-server | 已审查 | 2019-01-05 01:40 | 2022-04-07 04:39 |
| GHSA-V4X4-98CG-WR4G CVE-2018-20325 | Code injection in Danijar Definitions | 高危 | PyPIdefinitions | 已审查 | 2018-12-27 01:45 | 2024-09-14 04:11 |
| GHSA-3448-VFVV-XP9G CVE-2018-17197 | Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser | 中危 | Mavenorg.apache.tika:tika-parsers | 已审查 | 2018-12-27 01:45 | 2023-09-27 19:10 |
| GHSA-7X9J-7223-RG5M CVE-2016-1000031 | Improper Access Control in commons-fileupload | 严重 | Mavencommons-fileupload:commons-fileupload | 已审查 | 2018-12-22 01:51 | 2022-09-15 06:24 |
| GHSA-XX68-JFCG-XMMF CVE-2014-0050 | Commons FileUpload Denial of service vulnerability | 高危 | Mavencommons-fileupload:commons-fileupload+1 | 已审查 | 2018-12-22 01:51 | 2024-03-06 03:13 |
| GHSA-6X48-J4X4-CQW3 CVE-2018-8009 | Path Traversal in Hadoop | 高危 | Mavenorg.apache.hadoop:hadoop-main | 已审查 | 2018-12-22 01:50 | 2024-03-05 06:55 |
| GHSA-RQJ9-CQ6J-958R CVE-2018-11766 | Arbitrary Command Execution in Hadoop | 高危 | Mavenorg.apache.hadoop:hadoop-main | 已审查 | 2018-12-22 01:50 | 2022-09-15 06:27 |
| GHSA-MQ8P-H798-XCRP CVE-2017-15718 | Exposure of Sensitive Information in Hadoop | 严重 | Mavenorg.apache.hadoop:hadoop-main | 已审查 | 2018-12-22 01:50 | 2022-09-15 06:26 |
| GHSA-3V44-382Q-55F4 CVE-2017-15713 | Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main | 中危 | Mavenorg.apache.hadoop:hadoop-main | 已审查 | 2018-12-22 01:50 | 2021-09-01 05:30 |
| GHSA-99QR-9CC9-FV2X CVE-2017-3166 | Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main | 中危 | Mavenorg.apache.hadoop:hadoop-main | 已审查 | 2018-12-22 01:50 | 2021-09-08 05:13 |
| GHSA-9448-C9WQ-JG9V CVE-2018-11786 | Improper Privilege Management in Apache Karaf | 高危 | Mavenorg.apache.karaf:apache-karaf | 已审查 | 2018-12-22 01:49 | 2022-09-15 06:28 |
| GHSA-GF2J-7QWG-4F5X CVE-2018-14637 | Improper Authentication in Keycloak | 高危 | Mavenorg.keycloak:keycloak-core | 已审查 | 2018-12-22 01:48 | 2022-09-15 06:26 |
| GHSA-J379-9JR9-W5CQ CVE-2018-1000844 | XML External Entity (XXE) vulnerability in Square Retrofit | 严重 | Mavencom.squareup.retrofit2:retrofit | 已审查 | 2018-12-22 01:48 | 2022-09-15 06:25 |
| GHSA-8P8G-F9VG-R7XR CVE-2018-1000850 | Directory Traversal vulnerability in Square Retrofit | 高危 | Mavencom.squareup.retrofit2:retrofit | 已审查 | 2018-12-22 01:48 | 2022-09-15 06:25 |
| GHSA-FVM3-CFVJ-GXQQ CVE-2016-3092 | High severity vulnerability that affects commons-fileupload:commons-fileupload | 高危 | Mavencommons-fileupload:commons-fileupload | 已审查 | 2018-12-22 01:47 | 2021-07-19 23:57 |
| GHSA-H4X4-5QP2-WP46 CVE-2018-1000873 | Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353 | 中危 | Mavencom.fasterxml.jackson.datatype:jackson-datatype-jsr310 | 已审查 | 2018-12-22 01:46 | 2021-09-13 23:14 |
| GHSA-GFV6-CJ92-G3HX CVE-2018-1000872 | PyKMIP Denial of service vulnerability | 高危 | PyPIpykmip | 已审查 | 2018-12-22 01:46 | 2024-10-23 23:56 |