检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-M242-WC86-8768 CVE-2017-1002150 | python-fedora vulnerable to an open redirect resulting in loss of CSRF protection | 中危 | PyPIpython-fedora | 已审查 | 2018-07-13 23:17 | 2024-10-26 05:16 |
| GHSA-9PV8-Q5RX-C8GQ CVE-2017-16764 | django_make_app is vulnerable to Code Injection |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 严重 |
PyPIdjango_make_app |
| 已审查 |
| 2018-07-13 23:16 |
| 2024-09-17 06:58 |
| GHSA-C2W9-48QC-QPJ4 CVE-2017-2809 | Code injection in ansible | 高危 | PyPIansible-vault | 已审查 | 2018-07-13 23:16 | 2024-09-04 05:23 |
| GHSA-XCP8-HH74-F6MC CVE-2017-2592 | oslo.middleware Information Disclosure vulnerability | 高危 | PyPIoslo-middleware+1 | 已审查 | 2018-07-13 23:16 | 2024-10-08 05:21 |
| GHSA-32PC-XPHX-Q4F6 CVE-2018-1000164 | Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers | 高危 | PyPIgunicorn | 已审查 | 2018-07-13 04:30 | 2024-09-21 05:11 |
| GHSA-CWH5-3CW7-4286 CVE-2018-1000159 | tlslite-ng off-by-one error on mac checking | 高危 | PyPItlslite-ng | 已审查 | 2018-07-13 04:30 | 2024-11-14 06:51 |
| GHSA-HXF9-7H4C-F5JV CVE-2018-6596 | Django-Anymail prone to a timing attack | 严重 | PyPIdjango-anymail | 已审查 | 2018-07-13 04:30 | 2024-09-17 05:24 |
| GHSA-QC55-VM3J-74GP CVE-2018-0023 | JSNAPy allows unprivileged local users to alter files under the directory | 高危 | PyPIjsnapy | 已审查 | 2018-07-13 04:30 | 2024-09-25 05:02 |
| GHSA-3HQ4-F2V6-Q338 CVE-2018-9856 | Kotti CSRF in the local roles implementation | 高危 | PyPIKotti | 已审查 | 2018-07-13 04:30 | 2024-09-28 05:18 |
| GHSA-6MWW-XVH7-FQ4F CVE-2018-1002150 | Koji hub call does not perform correct access checks | 严重 | PyPIkoji | 已审查 | 2018-07-13 04:29 | 2024-09-28 03:25 |
| GHSA-8JXQ-75RW-FHJ9 CVE-2018-8097 | Eve allows execution of arbitrary code | 严重 | PyPIeve | 已审查 | 2018-07-13 04:29 | 2024-09-21 01:17 |
| GHSA-232R-66CG-79PX CVE-2018-7750 | Paramiko not properly checking authentication before processing other requests | 严重 | PyPIparamiko | 已审查 | 2018-07-13 04:29 | 2026-06-09 20:59 |
| GHSA-6528-WVF6-F6QG CVE-2018-6594 | Pycrypto generates weak key parameters | 高危 | PyPIpycrypto | 已审查 | 2018-07-13 04:29 | 2024-10-19 05:58 |
| GHSA-P6H9-GW49-RQM4 CVE-2018-5773 | markdown2 is vulnerable to cross-site scripting | 中危 | PyPImarkdown2 | 已审查 | 2018-07-13 04:29 | 2024-10-01 01:00 |
| GHSA-HXXF-Q3W9-4XGW | Malicious Package in eslint-scope | 严重 | npmeslint-config-eslint+1 | 已审查 | 2018-07-13 03:52 | 2021-09-15 01:35 |
| GHSA-W4VG-RF63-F3J3 CVE-2016-9190 | Arbitrary code using "crafted image file" approach affecting Pillow | 高危 | PyPIPillow | 已审查 | 2018-07-12 22:45 | 2024-10-08 21:00 |
| GHSA-P5WR-VP8G-Q5P4 CVE-2017-5524 | Plone Sandbox Escape | 中危 | PyPIPlone | 已审查 | 2018-07-12 22:45 | 2024-10-19 05:39 |
| GHSA-6CWV-X26C-W2Q4 CVE-2018-8768 | Jupyter Notebook file bypasses sanitization, executes JavaScript | 高危 | PyPInotebook | 已审查 | 2018-07-12 20:00 | 2024-09-28 03:51 |
| GHSA-PR3H-JJHJ-573X CVE-2018-3760 | Sprockets path traversal leads to information leak | 高危 | RubyGemssprockets | 已审查 | 2018-06-21 06:18 | 2023-09-06 05:05 |
| GHSA-QH2H-CHJ9-JFFQ CVE-2017-16042 | Growl before 1.10.0 vulnerable to Command Injection | 严重 | npmgrowl | 已审查 | 2018-06-08 20:43 | 2022-08-04 05:32 |
| GHSA-VWRF-R5R4-7775 CVE-2015-9236 | Incorrect handling of CORS preflight request headers in hapi | 中危 | npmhapi | 已审查 | 2018-06-08 03:43 | 2020-09-01 02:09 |
| GHSA-39PJ-GQ8Q-9PFJ CVE-2015-9240 | Authentication Weakness in keystone | 高危 | npmkeystone | 已审查 | 2018-06-08 03:43 | 2021-09-01 04:54 |
| GHSA-RC8H-3FV6-PXV8 CVE-2015-9241 | Denial of Service in hapi | 高危 | npmhapi | 已审查 | 2018-06-08 03:43 | 2020-09-01 02:09 |
| GHSA-VWJC-Q9PX-R9VQ CVE-2015-9242 | Denial of Service in ecstatic | 高危 | npmecstatic | 已审查 | 2018-06-08 03:43 | 2023-05-22 23:35 |
| GHSA-4662-J96G-MV46 CVE-2016-10548 | Arbitrary Code Injection in reduce-css-calc | 严重 | npmreduce-css-calc | 已审查 | 2018-06-08 03:43 | 2020-09-01 02:12 |