检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-F55W-CGVW-GPQX CVE-2021-24847 | 无摘要 | 高危 | —— | 未审查 | 2021-11-18 03:12 | 2021-11-19 08:00 |
| GHSA-XH4G-88QM-9P7R CVE-2021-32234 | 无摘要 |
当前筛选结果 366,391 条 · 时间按北京时间显示
—— |
| 未审查 |
| 2021-11-18 03:12 |
| 2021-11-19 08:00 |
| GHSA-P9J4-9VFH-GJ5C CVE-2021-43977 | 无摘要 | 中危 | —— | 未审查 | 2021-11-18 03:12 | 2024-02-28 02:44 |
| GHSA-6RX2-V6X4-XRVH CVE-2021-29861 | 无摘要 | 中危 | —— | 未审查 | 2021-11-18 03:12 | 2024-02-28 02:10 |
| GHSA-364W-9G92-3GRQ CVE-2021-43617 | Withdrawn: Laravel Framework does not sufficiently block the upload of executable PHP content. 已撤回 | 中危 | Packagistlaravel/framework | 已审查 | 2021-11-17 07:40 | 2021-11-18 06:04 |
| GHSA-RRC9-GQF8-8RWG CVE-2020-28472 | Prototype Pollution via file load in aws-sdk and @aws-sdk/shared-ini-file-loader | 高危 | npm@aws-sdk/shared-ini-file-loader+1 | 已审查 | 2021-11-17 05:26 | 2021-04-07 04:37 |
| GHSA-H352-G5VW-3926 CVE-2021-43620 | Improper Input Validation in fruity | 高危 | crates.iofruity | 已审查 | 2021-11-17 01:26 | 2023-06-14 01:27 |
| GHSA-R7CJ-8HJG-X622 CVE-2021-43608 | DBAL 3 SQL Injection Security Vulnerability | 严重 | Packagistdoctrine/dbal | 已审查 | 2021-11-17 01:25 | 2021-12-16 22:11 |
| GHSA-CQ58-R77C-5JJW CVE-2021-41258 | Cross-site scripting (XSS) from image block content in the site frontend | 中危 | Packagistgetkirby/cms | 已审查 | 2021-11-17 01:04 | 2021-11-16 23:49 |
| GHSA-X7J7-QP7J-HW3Q CVE-2021-41252 | Cross-site scripting (XSS) from writer field content in the site frontend | 中危 | Packagistgetkirby/cms | 已审查 | 2021-11-17 01:04 | 2021-11-16 23:46 |
| GHSA-QG54-694P-WGPP CVE-2021-41817 | Regular expression denial of service vulnerability (ReDoS) in date | 高危 | RubyGemsdate | 已审查 | 2021-11-16 08:32 | 2024-01-25 03:18 |
| GHSA-WMPV-C2JP-J2XG | ERC1155Supply vulnerability in OpenZeppelin Contracts | 低危 | npm@openzeppelin/contracts+1 | 已审查 | 2021-11-16 07:28 | 2021-11-16 06:27 |
| GHSA-P9M8-27X8-RG87 CVE-2021-41269 | Critical vulnerability found in cron-utils | 严重 | Mavencom.cronutils:cron-utils | 已审查 | 2021-11-16 07:27 | 2021-11-16 06:23 |
| GHSA-2CQG-Q7JM-J35C CVE-2021-3938 | snipe-it is vulnerable to Cross-site Scripting | 低危 | Packagistsnipe/snipe-it | 已审查 | 2021-11-16 07:19 | 2021-11-18 05:13 |
| GHSA-F99G-PG48-WRFC CVE-2021-3932 | twill is vulnerable to Cross-Site Request Forgery (CSRF) | 中危 | Packagistarea17/twill | 已审查 | 2021-11-16 07:19 | 2021-11-18 05:13 |
| GHSA-533P-CP2G-99WP CVE-2021-3931 | snipe-it is vulnerable to Cross-Site Request Forgery (CSRF) | 中危 | Packagistsnipe/snipe-it | 已审查 | 2021-11-16 07:19 | 2021-11-18 05:12 |
| GHSA-Q2CV-94XM-QVG4 CVE-2021-3921 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 中危 | Packagistgrumpydictator/firefly-iii | 已审查 | 2021-11-16 07:18 | 2021-11-18 05:12 |
| GHSA-W2F4-HXPM-MQ98 CVE-2021-3915 | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type | 高危 | Packagistssddanbrown/bookstack | 已审查 | 2021-11-16 07:17 | 2021-11-18 05:12 |
| GHSA-4999-659W-MQ36 CVE-2021-41266 | Authentication bypass issue in the Operator Console | 高危 | Gogithub.com/minio/console | 已审查 | 2021-11-16 07:16 | 2021-11-16 04:27 |
| GHSA-PJJF-HC4Q-G298 CVE-2021-3775 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 中危 | Packagistshowdoc/showdoc | 已审查 | 2021-11-16 07:16 | 2021-11-18 05:11 |
| GHSA-X5JP-9FMM-M9PF CVE-2021-3683 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 中危 | Packagistshowdoc/showdoc | 已审查 | 2021-11-16 07:13 | 2021-11-18 05:11 |
| GHSA-M4HJ-WG2R-QPCR CVE-2021-3776 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 中危 | Packagistshowdoc/showdoc | 已审查 | 2021-11-16 07:13 | 2021-11-18 05:10 |
| GHSA-VX6V-XG64-PMR8 CVE-2021-3945 | Cross-site Scripting in django-helpdesk | 高危 | PyPIdjango-helpdesk | 已审查 | 2021-11-16 07:12 | 2024-09-17 06:11 |
| GHSA-844M-CPR9-JCMH CVE-2021-41263 | Rails Multisite secure/signed cookies share secrets between sites in a multi-site application | 中危 | RubyGemsrails_multisite | 已审查 | 2021-11-16 01:54 | 2022-08-12 02:31 |
| GHSA-5XP3-JFQ3-5Q8X CVE-2021-3572 | Improper Input Validation in pip | 高危 | PyPIpip | 已审查 | 2021-11-16 01:45 | 2024-10-12 05:24 |