检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-VX5C-87QX-CV6C CVE-2017-1001002 | Arbitrary Code Execution in mathjs | 严重 | npmmathjs | 已审查 | 2017-12-19 06:27 | 2021-06-11 04:06 |
| GHSA-8C56-CPMW-89X7 CVE-2017-9050 | Out-of-bounds read in nokogiri |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 高危 |
RubyGemsnokogiri |
| 已审查 |
| 2017-12-14 05:38 |
| 2021-07-01 02:05 |
| GHSA-X27V-X225-GQ8G CVE-2017-0905 | Recurly gem Server-Side Request Forgery in Resource#find method | 严重 | RubyGemsrecurly | 已审查 | 2017-12-07 00:43 | 2023-08-29 23:38 |
| GHSA-2W67-526P-GM73 CVE-2017-1000248 | redis-store deserializes untrusted data | 严重 | RubyGemsredis-store | 已审查 | 2017-12-07 00:41 | 2023-03-15 05:11 |
| GHSA-3F5C-4QXJ-VMPF CVE-2017-16877 | Next.js Directory Traversal Vulnerability | 高危 | npmnext | 已审查 | 2017-12-05 10:04 | 2024-04-23 03:49 |
| GHSA-3W5V-P54C-F74X CVE-2017-1000228 | ejs is vulnerable to remote code execution due to weak input validation | 严重 | npmejs | 已审查 | 2017-12-01 07:15 | 2023-09-09 04:54 |
| GHSA-HWCF-PP87-7X6P CVE-2017-1000188 | mde ejs vulnerable to XSS | 中危 | npmejs | 已审查 | 2017-12-01 07:15 | 2023-09-09 05:35 |
| GHSA-3V3C-R5V2-68PH CVE-2017-0909 | private_address_check contains Incomplete List of Disallowed Inputs | 高危 | RubyGemsprivate_address_check | 已审查 | 2017-12-01 07:14 | 2023-01-21 06:07 |
| GHSA-Q43C-G2G7-6GXJ CVE-2017-16570 | Cross-Site Request Forgery (CSRF) in keystone | 高危 | npmkeystone | 已审查 | 2017-12-01 07:14 | 2021-06-11 05:18 |
| GHSA-HXHJ-HP9M-QWC4 CVE-2017-0904 | private_address_check vulnerable to bypass of Resolv.getaddresses method | 中危 | RubyGemsprivate_address_check | 已审查 | 2017-11-30 07:21 | 2023-01-24 01:38 |
| GHSA-653M-R33X-39FF CVE-2017-16792 | Geminabox contains Cross-site Scripting | 中危 | RubyGemsgeminabox | 已审查 | 2017-11-30 07:20 | 2023-03-15 07:07 |
| GHSA-X7P2-X2J6-MWHR CVE-2017-16833 | Gemirro Stored XSS in Gemspec "homepage" value | 中危 | RubyGemsgemirro | 已审查 | 2017-11-30 07:19 | 2023-08-29 20:26 |
| GHSA-5C8J-XR24-2665 CVE-2014-3741 | Potential Command Injection in printer | 严重 | npmprinter | 已审查 | 2017-11-29 06:44 | 2021-09-02 05:34 |
| GHSA-WWH7-4JW9-33X6 CVE-2017-16516 | yajl-ruby gem Denial of Service vulnerability | 高危 | RubyGemsyajl-ruby | 已审查 | 2017-11-29 06:44 | 2023-08-30 00:04 |
| GHSA-RPH7-J9QR-H8Q8 CVE-2013-7377 | Potential Command Injection in codem-transcode | 高危 | npmcodem-transcode | 已审查 | 2017-11-29 06:20 | 2021-09-18 03:23 |
| GHSA-PJJ4-W39G-PW54 CVE-2017-15928 | Ox gem crashes due to a crafted input | 高危 | RubyGemsox | 已审查 | 2017-11-22 02:26 | 2023-01-27 05:23 |
| GHSA-Q97V-764G-R2RP CVE-2014-9489 | gollum and gollum-lib allow remote authenticated users to execute arbitrary code | 高危 | RubyGemsgollum+1 | 已审查 | 2017-11-16 09:47 | 2023-01-24 05:34 |
| GHSA-7CV6-GVX3-M54M CVE-2017-15881 | Cross-Site Scripting in keystone | 中危 | npmkeystone | 已审查 | 2017-11-16 09:47 | 2021-06-11 21:54 |
| GHSA-6494-V9FQ-FGQ2 CVE-2017-15879 | Keystone is vulnerable to CSV injection | 高危 | npmkeystone | 已审查 | 2017-11-16 09:46 | 2022-04-26 06:05 |
| GHSA-MW35-24GH-F82W CVE-2017-7474 | keycloak-connect and keycloak-js improperly handle invalid tokens | 严重 | npmkeycloak-connect+1 | 已审查 | 2017-11-16 04:41 | 2023-09-09 03:56 |
| GHSA-5V3F-73GV-X7X5 CVE-2017-7475 | cairo is vulnerable to denial of service due to a null pointer dereference | 中危 | RubyGemscairo | 已审查 | 2017-11-16 04:41 | 2023-08-28 18:13 |
| GHSA-WMJF-JPJJ-9F3J CVE-2017-8418 | RuboCop gem Insecure use of /tmp | 低危 | RubyGemsrubocop | 已审查 | 2017-11-16 04:39 | 2023-08-28 21:43 |
| GHSA-7QCX-JMRC-H2RR CVE-2017-15878 | Cross-Site Scripting in keystone | 中危 | npmkeystone | 已审查 | 2017-11-16 03:44 | 2021-09-04 05:41 |
| GHSA-XXR8-833V-C7WC CVE-2011-4319 | Cross-site Scripting vulnerability in i18n translations helper method | 中危 | RubyGemsactionpack | 已审查 | 2017-10-25 02:33 | 2023-05-27 05:06 |
| GHSA-XGJ6-PGRM-X4R2 CVE-2007-6183 | gtk2 vulnerable to Use of Externally-Controlled Format String | 中危 | RubyGemsgtk2 | 已审查 | 2017-10-25 02:33 | 2023-01-27 06:31 |