检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-7P8G-6C6G-H9W7 CVE-2026-47419 | praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR | 高危 | PyPIpraisonai-platform | 已审查 | 2026-06-06 00:28 | 2026-06-06 00:28 |
| GHSA-H535-J5HR-MV56 CVE-2026-47669 |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 严重 |
npmdbgate |
| 已审查 |
| 2026-06-06 00:26 |
| 2026-06-06 00:26 |
| GHSA-8V3Q-9VMX-36VC CVE-2026-47668 | DbGate: Unauthenticated Remote Code Execution via JSON Script Runner | 严重 | npmdbgate-serve | 已审查 | 2026-06-06 00:25 | 2026-06-06 00:25 |
| GHSA-XXPJ-Q764-9R6Q CVE-2026-47388 | NocoDB: Missing Ownership Check in MCP Attachment Read | 低危 | npmnocodb | 已审查 | 2026-06-06 00:22 | 2026-07-21 05:19 |
| GHSA-HJ85-PH9Q-78JG CVE-2026-47387 | NocoDB: Stored Cross-Site Scripting via Form View Redirect URL | 高危 | npmnocodb | 已审查 | 2026-06-06 00:20 | 2026-07-21 05:19 |
| GHSA-8M7C-HF24-5G47 CVE-2026-47386 | NocoDB: OAuth Authorization Code Race Condition | 中危 | npmnocodb | 已审查 | 2026-06-06 00:20 | 2026-07-21 05:18 |
| GHSA-WVQJ-9WV4-7FF5 CVE-2026-47385 | NocoDB: Path Traversal via SQLite Source Filename | 中危 | npmnocodb | 已审查 | 2026-06-06 00:20 | 2026-07-21 05:18 |
| GHSA-P8WX-5F39-W3X4 CVE-2026-47384 | NocoDB: SQL Injection via Column Title in Bulk GroupBy | 中危 | npmnocodb | 已审查 | 2026-06-06 00:19 | 2026-07-21 05:18 |
| GHSA-JF3G-4GWG-4H66 CVE-2026-47383 | NocoDB: Stored Cross-Site Scripting via Row Comments | 高危 | npmnocodb | 已审查 | 2026-06-06 00:19 | 2026-07-21 05:18 |
| GHSA-W43H-R5M5-P832 CVE-2026-47382 | NocoDB: Server-Side Request Forgery via Database Connection Host | 中危 | npmnocodb | 已审查 | 2026-06-06 00:19 | 2026-07-21 05:18 |
| GHSA-96FH-M4R8-6V9V CVE-2026-47381 | NocoDB: Cross-Workspace Integration Use in Connection Test | 中危 | npmnocodb | 已审查 | 2026-06-06 00:04 | 2026-07-21 05:18 |
| GHSA-JR54-JWHJ-55GP CVE-2026-47380 | NocoDB: User Enumeration via Sign-In Timing | 中危 | npmnocodb | 已审查 | 2026-06-06 00:03 | 2026-07-21 05:18 |
| GHSA-QHXG-623C-CFJM CVE-2026-47379 | NocoDB: Plaintext Password Comparison in Shared Views | 中危 | npmnocodb | 已审查 | 2026-06-06 00:03 | 2026-07-21 05:17 |
| GHSA-4W6R-5C2J-QF5F CVE-2026-47378 | NocoDB: Hidden Column Exposure in Public Shared View Endpoints | 中危 | npmnocodb | 已审查 | 2026-06-06 00:03 | 2026-07-21 05:19 |
| GHSA-RVP5-9P55-F5RP CVE-2026-47377 | NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin | 中危 | npmnocodb | 已审查 | 2026-06-06 00:00 | 2026-07-21 05:17 |
| GHSA-6XCX-7QMG-VJFQ CVE-2026-47376 | NocoDB: Reflected Cross-Site Scripting via Password Reset Token | 中危 | npmnocodb | 已审查 | 2026-06-05 23:59 | 2026-07-21 05:17 |
| GHSA-CXV7-GMMP-228P CVE-2026-47375 | NocoDB: Postgres SQL Injection in Formula `ARRAYSORT` | 中危 | npmnocodb | 已审查 | 2026-06-05 23:59 | 2026-07-21 05:17 |
| GHSA-9WGH-M22W-9XJ8 CVE-2026-47279 | NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints | 中危 | npmnocodb | 已审查 | 2026-06-05 23:52 | 2026-07-21 05:17 |
| GHSA-2R75-CXRJ-CMPH CVE-2026-47261 | wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction | 高危 | crates.iowasmtime-wasi | 已审查 | 2026-06-05 23:47 | 2026-07-09 01:35 |
| GHSA-6MX4-4H42-R8VH CVE-2026-47250 | MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration | 中危 | npmmcp-server-kubernetes | 已审查 | 2026-06-05 23:40 | 2026-06-13 03:26 |
| GHSA-94JW-HQVJ-VW74 CVE-2026-37737 | sanic-cors contains an improper regular expression in the try_match() function | 中危 | PyPIsanic-cors | 已审查 | 2026-06-05 23:32 | 2026-07-18 01:05 |
| GHSA-5GVR-V6QV-H5MM CVE-2026-11330 | claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision | 低危 | npmclaude-mem | 已审查 | 2026-06-05 23:32 | 2026-07-18 00:53 |
| GHSA-W342-MJ6G-V9C4 CVE-2026-47249 | Klever-Go KVM: Hash-array amplification in P2P resolver request handling | 高危 | Gogithub.com/klever-io/klever-go | 已审查 | 2026-06-05 23:27 | 2026-06-05 23:27 |
| GHSA-WV8C-6MX2-XF4J CVE-2026-45726 | Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService | 高危 | Gogithub.com/siderolabs/omni | 已审查 | 2026-06-05 23:26 | 2026-06-05 23:26 |
| GHSA-C66C-VQ6W-FVH5 CVE-2026-45723 | Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic | 低危 | Gogithub.com/siderolabs/omni | 已审查 | 2026-06-05 23:25 | 2026-06-05 23:25 |