检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-4GPV-CVMQ-6526 | Denial of Service in protobufjs 已撤回 | 中危 | npmprotobufjs | 已审查 | 2020-08-20 06:23 | 2020-08-20 06:23 |
| GHSA-QRG3-F6H6-VQ8Q |
当前筛选结果 366,391 条 · 时间按北京时间显示
Denial of Service in https-proxy-agent 已撤回 |
| 高危 |
npmhttps-proxy-agent |
| 已审查 |
| 2020-08-20 06:15 |
| 2020-08-20 06:15 |
| GHSA-4X7C-CX64-49W8 | Regular Expression Denial of Service in is-my-json-valid 已撤回 | 低危 | npmis-my-json-valid | 已审查 | 2020-08-20 06:06 | 2020-08-20 06:06 |
| GHSA-MPCX-8QQW-RMCQ | SQL Injection in waterline-sequel 已撤回 | 高危 | npmwaterline-sequel | 已审查 | 2020-08-20 05:51 | 2020-08-20 05:51 |
| GHSA-9XGP-HFW7-73RQ | Authentication Weakness in keystone 已撤回 | 中危 | npmkeystone | 已审查 | 2020-08-20 05:30 | 2020-08-20 05:30 |
| GHSA-6GG3-PMM7-97XC CVE-2020-15119 | DOM-based XSS in auth0-lock | 低危 | npmauth0-lock | 已审查 | 2020-08-20 05:05 | 2021-01-08 07:40 |
| GHSA-P4PJ-9G59-4PPV CVE-2020-15143 | Remote Code Execution in SyliusResourceBundle | 高危 | Packagistsylius/resource-bundle | 已审查 | 2020-08-20 05:04 | 2021-11-19 23:41 |
| GHSA-H6M7-J4H3-9RF5 CVE-2020-15146 | Remote Code Execution in SyliusResourceBundle | 严重 | Packagistsylius/resource-bundle | 已审查 | 2020-08-20 03:52 | 2021-11-19 23:36 |
| GHSA-CRF2-XM6X-46P6 CVE-2020-15151 | Observable Timing Discrepancy in OpenMage LTS | 高危 | Packagistopenmage/magento-lts | 已审查 | 2020-08-20 02:02 | 2021-11-19 23:36 |
| GHSA-F93J-HMCR-JCWH CVE-2015-4410 | Moped Rubygem Data Injection Vulnerability | 高危 | RubyGemsmoped | 已审查 | 2020-08-20 00:45 | 2023-08-26 05:39 |
| GHSA-CF8J-64H9-6Q58 CVE-2020-12480 | CSRF in Play Framework | 中危 | Mavencom.typesafe.play:play_2.12 | 已审查 | 2020-08-19 01:30 | 2021-09-24 02:57 |
| GHSA-JW37-5GQR-CF9J CVE-2020-15152 | Server-Side Request Forgery in ftp-srv | 严重 | npmftp-srv | 已审查 | 2020-08-18 05:44 | 2021-01-13 03:30 |
| GHSA-9M4X-8W29-R78G CVE-2020-8205 | Server-Side Request Forgery in @uppy/companion | 高危 | npm@uppy/companion | 已审查 | 2020-08-14 02:54 | 2023-09-14 03:18 |
| GHSA-3J95-FJV2-3M4P CVE-2020-16254 | CSS Injection in Chartkick gem | 中危 | RubyGemschartkick | 已审查 | 2020-08-12 22:29 | 2021-09-24 02:53 |
| GHSA-J7WP-VJJ6-CP5M | Cross-Site Scripting in @progress/kendo-angular-editor | 高危 | npm@progress/kendo-angular-editor | 已审查 | 2020-08-12 03:40 | 2021-09-24 02:55 |
| GHSA-HXCC-F52P-WC94 CVE-2020-7660 | Insecure serialization leading to RCE in serialize-javascript | 高危 | npmserialize-javascript | 已审查 | 2020-08-12 01:21 | 2021-09-24 02:50 |
| GHSA-VRV8-V4W8-F95H CVE-2020-12648 | Cross-site scripting vulnerability in TinyMCE | 中危 | npmtinymce | 已审查 | 2020-08-11 22:55 | 2023-05-22 22:51 |
| GHSA-Q6J3-C4WC-63VW | CSRF tokens leaked in URL by canned query form | 中危 | PyPIdatasette | 已审查 | 2020-08-11 22:54 | 2021-09-24 02:50 |
| GHSA-WVHM-4HHF-97X9 CVE-2020-15138 | Cross-Site Scripting in Prism | 高危 | npmprismjs | 已审查 | 2020-08-08 06:28 | 2021-01-08 07:41 |
| GHSA-MQM2-CGPR-P4M6 CVE-2020-14001 | Unintended read access in kramdown gem | 严重 | RubyGemskramdown | 已审查 | 2020-08-08 06:27 | 2022-04-30 04:26 |
| GHSA-5CP4-XMRW-59WF | XSS via JQLite DOM manipulation functions in AngularJS | 中危 | npmangular | 已审查 | 2020-08-06 05:47 | 2021-10-09 05:25 |
| GHSA-WHRH-9J4Q-G7PH | CSRF Vulnerability in polaris-website | 中危 | npmpolaris-website | 已审查 | 2020-08-06 05:43 | 2021-09-24 02:38 |
| GHSA-WFM4-PQ59-WG6R CVE-2020-15132 | Reset Password / Login vulnerability in Sulu | 中危 | Packagistsulu/sulu | 已审查 | 2020-08-06 05:27 | 2021-01-08 07:41 |
| GHSA-V6FX-752R-CCP2 CVE-2020-16253 | PgHero gem allows CSRF | 高危 | RubyGemspghero | 已审查 | 2020-08-05 22:53 | 2023-08-26 06:21 |
| GHSA-W542-CPP9-R3G7 CVE-2020-16252 | Field Test CSRF vulnerability | 中危 | RubyGemsfield_test | 已审查 | 2020-08-05 22:53 | 2023-07-06 04:19 |