检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-2WQP-JMCC-MC77 CVE-2021-31405 | Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17 | 高危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-19 22:47 | 2021-04-17 07:13 |
| GHSA-9H6G-6MXG-VVP4 | Timing side channel vulnerability in endpoint request handler in Vaadin 15-19 |
当前筛选结果 366,391 条 · 时间按北京时间显示
| 中危 |
Mavencom.vaadin:vaadin-bom |
| 已审查 |
| 2021-04-19 22:47 |
| 2021-10-09 05:24 |
| GHSA-J9WR-49VQ-RM5G | Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19 | 高危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-19 22:46 | 2021-10-09 05:24 |
| GHSA-PW4V-GR34-2553 CVE-2021-29433 | Sydent DoS (via resource exhaustion) due to improper input validation | 中危 | PyPImatrix-sydent | 已审查 | 2021-04-17 03:53 | 2024-09-24 23:42 |
| GHSA-PGHF-347X-C2GJ CVE-2021-30459 | SQL Injection via in django-debug-toolbar | 高危 | PyPIdjango-debug-toolbar | 已审查 | 2021-04-17 03:53 | 2024-09-14 04:10 |
| GHSA-G8R4-P96J-XFXC CVE-2021-29440 | Grav's Twig processing allowing dangerous PHP functions by default | 高危 | Packagistgetgrav/grav | 已审查 | 2021-04-17 03:53 | 2022-08-11 08:01 |
| GHSA-G3FQ-3V3G-MH32 CVE-2021-29438 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs | 中危 | npm@nextcloud/dialogs | 已审查 | 2021-04-17 03:52 | 2021-04-14 02:40 |
| GHSA-2PWH-52H7-7J84 CVE-2024-0758 | JavaScript execution via malicious molfiles (XSS) | 中危 | Mavende.ipb-halle:molecularfaces | 已审查 | 2021-04-17 03:52 | 2026-01-23 04:36 |
| GHSA-27FJ-MC8W-J9WG CVE-2021-30246 | RSA signature validation vulnerability on maleable encoded message in jsrsasign | 严重 | npmjsrsasign | 已审查 | 2021-04-17 03:52 | 2023-09-12 02:42 |
| GHSA-M5PG-8H68-J225 CVE-2020-8277 | Uncontrolled Resource Consumption in node | 高危 | —— | 未审查 | 2021-04-15 05:47 | 2021-12-04 05:10 |
| GHSA-4C7M-WXVM-R7GC CVE-2021-28918 | Improper parsing of octal bytes in netmask | 严重 | npmnetmask | 已审查 | 2021-04-14 23:03 | 2022-04-02 04:21 |
| GHSA-H8HX-2C5R-32CF CVE-2021-29435 | Cross-Site Request Forgery (CSRF) in trestle-auth | 高危 | RubyGemstrestle-auth | 已审查 | 2021-04-14 01:01 | 2021-04-14 01:01 |
| GHSA-QWWG-GC55-QQRV CVE-2020-17131 | Out-of-bounds Write in Chakra | 高危 | NuGetMicrosoft.ChakraCore | 已审查 | 2021-04-13 23:54 | 2025-08-29 23:22 |
| GHSA-936X-WGQV-HHGQ CVE-2020-5811 | Authenticated path traversal in Umbraco CMS | 中危 | NuGetUmbracoCms | 已审查 | 2021-04-13 23:51 | 2021-04-07 07:37 |
| GHSA-4VP3-VFWW-8648 CVE-2020-29454 | Incorrect permission enforcement in UmbracoCms | 中危 | NuGetUmbracoCms | 已审查 | 2021-04-13 23:48 | 2021-04-10 06:11 |
| GHSA-6HRM-JQP3-64CV CVE-2020-24393 | Improper Certificate Validation in TweetStream | 中危 | RubyGemstweetstream | 已审查 | 2021-04-13 23:42 | 2023-01-27 06:35 |
| GHSA-GQVF-892R-VJM5 CVE-2020-7942 | Improper Certificate Validation in Puppet | 中危 | RubyGemspuppet | 已审查 | 2021-04-13 23:42 | 2023-07-06 03:26 |
| GHSA-8F89-2FWJ-5V5R CVE-2020-8125 | Improper Input Validation in klona | 高危 | npmklona | 已审查 | 2021-04-13 23:41 | 2021-03-31 00:22 |
| GHSA-HXMG-HM46-CF62 CVE-2020-24391 | Remote code execution in mongo-express | 严重 | npmmongodb-query-parser | 已审查 | 2021-04-13 23:41 | 2023-09-13 03:23 |
| GHSA-MM4F-47CH-F7HX CVE-2021-23363 | Arbitrary code execution in kill-by-port | 中危 | npmkill-by-port | 已审查 | 2021-04-13 23:32 | 2022-07-06 02:00 |
| GHSA-XMXH-G7WJ-8M4M CVE-2019-10789 | OS Command Injection in curling | 高危 | npmcurling | 已审查 | 2021-04-13 23:32 | 2021-04-13 23:32 |
| GHSA-22CM-3QF2-2WC7 CVE-2021-23335 | LDAP Injection in is-user-valid | 高危 | npmis-user-valid | 已审查 | 2021-04-13 23:30 | 2021-04-02 07:39 |
| GHSA-333X-QR3V-G4XX CVE-2020-7782 | Command injection in spritesheet-js | 严重 | npmspritesheet-js | 已审查 | 2021-04-13 23:30 | 2021-04-06 03:04 |
| GHSA-W8H4-VW8F-RVVJ CVE-2021-26276 | Improper Control of Dynamically-Managed Code Resources in config-shield | 中危 | npmconfig-shield | 已审查 | 2021-04-13 23:30 | 2023-09-13 03:22 |
| GHSA-FRPW-JRWX-HCFV CVE-2021-25864 | Path Traversal in node-red-contrib-huemagic | 高危 | npmnode-red-contrib-huemagic | 已审查 | 2021-04-13 23:30 | 2023-09-08 06:38 |