检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-VXHC-C4QM-647P CVE-2021-25954 | Improper Access Control in Dolibarr | 中危 | Packagistdolibarr/dolibarr | 已审查 | 2021-08-11 23:18 | 2021-10-21 21:35 |
| GHSA-PP7M-6J83-M7R6 CVE-2021-23414 | Cross-site Scripting in video.js |
当前筛选结果 366,391 条 · 时间按北京时间显示
| 中危 |
npmvideo.js |
| 已审查 |
| 2021-08-11 00:09 |
| 2021-09-01 05:01 |
| GHSA-VJ72-MWRJ-M2XQ CVE-2021-23417 | Prototype Pollution in deepmergefn | 中危 | npmdeepmergefn | 已审查 | 2021-08-11 00:09 | 2021-09-01 05:21 |
| GHSA-RQF8-8C89-MW29 CVE-2021-23416 | Cross-site Scripting in curly-bracket-parser | 中危 | npmcurly-bracket-parser | 已审查 | 2021-08-11 00:08 | 2021-09-01 05:14 |
| GHSA-HH27-FFR2-F2JC CVE-2021-3664 | Open redirect in url-parse | 中危 | npmurl-parse | 已审查 | 2021-08-11 00:07 | 2026-02-04 06:12 |
| GHSA-JG8V-48H5-WGXG CVE-2021-23413 | jszip Vulnerable to Prototype Pollution | 中危 | npmjszip | 已审查 | 2021-08-11 00:02 | 2023-09-13 03:23 |
| GHSA-HJ48-42VR-X3V9 CVE-2021-23343 | Regular Expression Denial of Service in path-parse | 中危 | npmpath-parse | 已审查 | 2021-08-10 23:33 | 2021-08-10 23:34 |
| GHSA-5RC4-8QQH-VQ7F CVE-2018-3718 | vercel/serve allows access to restricted files if filename is URL encoded. | 中危 | npmserve | 已审查 | 2021-08-10 06:24 | 2023-09-13 04:58 |
| GHSA-F865-M6CQ-J9VX CVE-2021-29063 | ReDOS in Mpmath | 高危 | PyPImpmath | 已审查 | 2021-08-10 04:44 | 2024-10-04 05:26 |
| GHSA-4298-89HC-6RFV CVE-2021-23401 | Open Redirect in Flask-User | 中危 | PyPIFlask-User | 已审查 | 2021-08-10 04:44 | 2024-09-21 01:59 |
| GHSA-HWFP-HG2M-9VR2 CVE-2021-32559 | Integer overflow in pywin32 | 高危 | PyPIpywin32 | 已审查 | 2021-08-10 04:43 | 2025-03-28 01:43 |
| GHSA-R2MJ-8WGQ-73M6 CVE-2021-23418 | XML External Entity Reference in Glances | 中危 | PyPIGlances | 已审查 | 2021-08-10 04:43 | 2024-09-21 04:59 |
| GHSA-PJXV-W3QJ-J8M3 CVE-2021-23415 | Directory Traversal in elFinder.AspNet | 高危 | NuGetelFinder.AspNet | 已审查 | 2021-08-10 04:42 | 2021-09-01 05:00 |
| GHSA-9HX8-2MRV-R674 CVE-2021-37578 | Deserialization of Untrusted Data in Apache jUDDI | 严重 | Mavenorg.apache.juddi:juddi-core | 已审查 | 2021-08-10 04:41 | 2021-09-01 05:02 |
| GHSA-3393-HVRJ-W7V3 CVE-2021-22144 | Denial of Service in Elasticsearch | 中危 | Mavenorg.elasticsearch:elasticsearch | 已审查 | 2021-08-10 04:41 | 2021-08-03 03:21 |
| GHSA-4X25-F45X-GRV5 CVE-2021-33900 | Missing encryption in Apache Directory Studio | 高危 | Mavenorg.apache.directory.studio:org.apache.directory.studio.parent | 已审查 | 2021-08-10 04:40 | 2021-08-11 00:54 |
| GHSA-P8Q8-JFCV-G2H2 CVE-2021-32610 | Directory Traversal in Archive_Tar | 高危 | Packagistpear/archive_tar | 已审查 | 2021-08-10 04:40 | 2021-09-21 04:26 |
| GHSA-CH3R-VP46-8G22 CVE-2020-17952 | Code injection in topthink/think | 严重 | Packagisttopthink/think | 已审查 | 2021-08-10 04:39 | 2021-09-01 05:00 |
| GHSA-V2F3-F8X4-M3W8 CVE-2020-23234 | Cross Site Scripting in LavaLite CMS | 中危 | Packagistlavalite/cms | 已审查 | 2021-08-10 04:38 | 2023-07-07 05:32 |
| GHSA-56CX-WF47-HX7W CVE-2021-3663 | No Restriction of Excessive Authentication Attempts in Firefly III | 中危 | Packagistgrumpydictator/firefly-iii | 已审查 | 2021-08-10 04:38 | 2023-07-07 05:34 |
| GHSA-H563-XH25-X54Q CVE-2021-37914 | Workflow re-write vulnerability using input parameter | 中危 | Gogithub.com/argoproj/argo-workflows/v3 | 已审查 | 2021-08-10 04:37 | 2021-08-31 07:23 |
| GHSA-H3MF-4FWP-59C7 | VecStorage Deserialize Allows Violation of Length Invariant 已撤回 | 中危 | crates.ionalgebra | 已审查 | 2021-08-06 03:58 | 2021-08-25 02:08 |
| GHSA-G4XG-FXMG-VCG5 CVE-2021-3013 | OS command injection in ripgrep | 严重 | crates.iogrep-cli+1 | 已审查 | 2021-08-06 03:31 | 2021-09-08 05:16 |
| GHSA-HXWM-X553-X359 | Arbitrary Command Injection due to Improper Command Sanitization | 中危 | npm@npmcli/git | 已审查 | 2021-08-06 01:07 | 2021-08-03 03:02 |
| GHSA-M697-4V8F-55QG CVE-2021-32813 | Header dropping in traefik | 中危 | Gogithub.com/traefik/traefik+1 | 已审查 | 2021-08-06 01:04 | 2021-09-01 04:57 |