检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-R5FX-8R73-V86C CVE-2019-14863 | AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes | 中危 | npmangular | 已审查 | 2020-02-15 07:08 | 2025-11-21 03:30 |
| GHSA-PG97-WW7H-5MJR CVE-2019-10785 | XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode |
当前筛选结果 366,391 条 · 时间按北京时间显示
| 中危 |
npmdojox |
| 已审查 |
| 2020-02-14 06:21 |
| 2021-08-20 01:21 |
| GHSA-3JQW-VV45-MJHH CVE-2020-5241 | XSS/Script injection vulnerability in matestack | 高危 | RubyGemsmatestack-ui-core | 已审查 | 2020-02-13 07:37 | 2023-05-23 02:25 |
| GHSA-XWGQ-PCQX-HPMV CVE-2019-19703 | URL Redirection to Untrusted Site (Open Redirect) in Ktor | 中危 | Mavenio.ktor:ktor-client-core | 已审查 | 2020-02-13 02:45 | 2021-08-20 00:56 |
| GHSA-WW97-9W65-2CRX CVE-2019-17558 | Improper Input Validation in Apache Solr | 高危 | Mavenorg.apache.solr:solr-core | 已审查 | 2020-02-13 02:45 | 2025-10-23 01:45 |
| GHSA-CCHX-MFRC-FWQR CVE-2019-10911 | Improper authentication in Symfony | 高危 | Packagistsymfony/security+2 | 已审查 | 2020-02-13 02:45 | 2021-10-01 02:40 |
| GHSA-W2FR-65VP-MXW3 CVE-2019-10912 | Deserialization of untrusted data in Symfony | 高危 | Packagistsymfony/cache+4 | 已审查 | 2020-02-13 02:44 | 2024-02-05 19:09 |
| GHSA-W4RC-RX25-8M86 CVE-2019-11325 | Improper Input Validation in Symfony | 严重 | Packagistsymfony/symfony+1 | 已审查 | 2020-02-13 02:44 | 2021-08-20 01:13 |
| GHSA-HMR4-M2H5-33QX CVE-2020-7471 | SQL injection in Django | 严重 | PyPIDjango | 已审查 | 2020-02-12 05:03 | 2024-09-20 23:03 |
| GHSA-WGJX-HM34-QGF7 CVE-2019-16194 | SQL injection in Centreon | 严重 | Packagistcentreon/centreon | 已审查 | 2020-02-12 04:36 | 2021-08-20 01:12 |
| GHSA-R6J9-8759-G62W CVE-2019-10172 | Improper Restriction of XML External Entity Reference in jackson-mapper-asl | 高危 | Mavenorg.codehaus.jackson:jackson-mapper-asl | 已审查 | 2020-02-05 06:39 | 2021-03-26 08:27 |
| GHSA-V4QH-6367-4CX2 CVE-2020-1925 | Server-Side Request Forgery (SSRF) in Apache Olingo | 高危 | Mavenorg.apache.olingo:odata-client-core | 已审查 | 2020-02-05 06:38 | 2021-08-20 00:54 |
| GHSA-GJ76-429M-56WC CVE-2019-17556 | Deserialization of Untrusted Data in Apache Olingo | 严重 | Mavenorg.apache.olingo:odata-client-proxy | 已审查 | 2020-02-05 06:38 | 2021-08-20 00:54 |
| GHSA-MGH8-HCWJ-H57V CVE-2019-17554 | Improper Restriction of XML External Entity Reference in Apache Olingo | 中危 | Mavenorg.apache.olingo:odata-client-core+1 | 已审查 | 2020-02-05 06:37 | 2021-08-20 00:53 |
| GHSA-477X-W7M6-C6PH CVE-2019-17555 | Improper input validation in Apache Olingo | 高危 | Mavenorg.apache.olingo:odata-client-core | 已审查 | 2020-02-05 06:37 | 2021-08-20 00:52 |
| GHSA-R679-M633-G7WC CVE-2019-12422 | Improper input validation in Apache Shiro | 高危 | Mavenorg.apache.shiro:shiro-core | 已审查 | 2020-02-05 06:36 | 2023-03-07 04:47 |
| GHSA-73M2-3PWG-5FGC CVE-2020-5236 | Catastrophic backtracking in regex allows Denial of Service in Waitress | 中危 | PyPIwaitress | 已审查 | 2020-02-04 11:07 | 2024-11-19 23:34 |
| GHSA-PRG5-HG25-8GRQ CVE-2020-5218 | Ability to switch channels via GET parameter enabled in production environments | 低危 | Packagistsylius/sylius | 已审查 | 2020-02-01 02:00 | 2021-01-09 04:32 |
| GHSA-8VP7-J5CJ-VVM2 CVE-2020-5220 | Ability to expose data in Sylius by using an unintended serialisation group | 中危 | Packagistsylius/resource-bundle+1 | 已审查 | 2020-02-01 02:00 | 2024-02-08 02:42 |
| GHSA-763G-FQQ7-48WG CVE-2019-10782 | XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled)) | 中危 | Mavencom.puppycrawl.tools:checkstyle | 已审查 | 2020-02-01 02:00 | 2021-08-20 00:49 |
| GHSA-W2PF-G6R8-PG22 CVE-2019-20174 | auth0-lock vulnerable to XSS via unsanitized placeholder property | 中危 | npmauth0-lock | 已审查 | 2020-02-01 01:59 | 2023-09-12 02:14 |
| GHSA-7Q36-4XX7-XCXF CVE-2020-5234 | Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack | 中危 | NuGetMessagePack+4 | 已审查 | 2020-02-01 01:59 | 2024-10-17 06:06 |
| GHSA-8F9F-PC5V-9R5H CVE-2020-5232 | Malicious takeover of previously owned ENS names | 高危 | npm@ensdomains/ens | 已审查 | 2020-01-31 07:55 | 2022-09-22 03:32 |
| GHSA-27GM-GHR9-4V95 CVE-2020-17480 | Cross-site scripting vulnerability in TinyMCE | 高危 | npmtinymce | 已审查 | 2020-01-31 05:22 | 2023-06-28 00:50 |
| GHSA-6F54-3QR9-PJGJ CVE-2020-5228 | Unauthenticated Access Via OAI-PMH | 高危 | Mavenorg.opencastproject:opencast-oaipmh-api | 已审查 | 2020-01-31 05:22 | 2021-01-09 04:32 |